EIP-2026-114058

PRE-CVE

WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114058. PoCs published by m3tamantra.

AI-analyzed exploit summary This exploit demonstrates a CSRF and stored XSS vulnerability in the WordPress Simply Poll Plugin 1.4.1. It automates the submission of a malicious poll containing JavaScript code, which executes when viewed by an admin.

Description

WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by m3tamantra · textwebappsphp
https://www.exploit-db.com/exploits/24850

This exploit demonstrates a CSRF and stored XSS vulnerability in the WordPress Simply Poll Plugin 1.4.1. It automates the submission of a malicious poll containing JavaScript code, which executes when viewed by an admin.

Classification
Working Poc 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: WordPress Simply Poll Plugin 1.4.1
Auth required
Prerequisites: Admin user must be logged in and tricked into visiting the malicious page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026