WordPress Total Poll Lite Plugin <= 4.12.0 - Remote Code Execution (RCE) Schwachstelle

The impact of this RCE vulnerability is severe. An attacker could exploit it to execute arbitrary code on the web server hosting the vulnerable WordPress site. This could lead to complete compromise of the site, including data theft, defacement, malware installation, and lateral movement to other systems on the network. The attacker could potentially gain access to sensitive user data stored within the WordPress database or use the compromised server as a launchpad for further attacks. The Remote Code Inclusion aspect significantly elevates the risk, as it bypasses typical input validation and allows direct execution of malicious code.

WordPress websites utilizing the Total Poll Lite plugin, particularly those running versions 0.0.0 through 4.12.0, are at significant risk. Shared hosting environments are particularly vulnerable, as attackers may be able to exploit the vulnerability on multiple websites hosted on the same server. Sites with weak file access controls or inadequate security monitoring are also at increased risk.

• wordpress / composer / npm:

wp plugin list | grep total-poll-lite

• wordpress / composer / npm:

grep -r 'include($_REQUEST' /var/www/html/wp-content/plugins/total-poll-lite/*

• generic web:

curl -I https://your-wordpress-site.com/wp-content/plugins/total-poll-lite/ | grep 'Remote Code Inclusion'

1. 2026-03-25Disclosure

   disclosure

1. Reserviert2026-02-17
2. Veröffentlicht2026-03-25
3. Geändert2026-04-28
4. EPSS aktualisiert2026-04-02

The primary mitigation is to upgrade to a patched version of the Total Poll Lite plugin as soon as it becomes available. Until a patch is released, consider temporarily disabling the plugin to prevent exploitation. Implement strict file access controls on the WordPress server to limit the attacker's ability to upload and execute malicious files. Web Application Firewalls (WAFs) can be configured with rules to detect and block attempts to include remote files. Monitor WordPress logs for suspicious activity, particularly attempts to access or modify plugin files.

Aktive Installationen

1KNische

Plugin-Bewertung