CVE-2026-27044: RCE in Total Poll Lite WordPress Plugin

The impact of this RCE vulnerability is severe. An attacker could exploit it to execute arbitrary code on the web server hosting the vulnerable WordPress site. This could lead to complete compromise of the site, including data theft, defacement, malware installation, and lateral movement to other systems on the network. The attacker could potentially gain access to sensitive user data stored within the WordPress database or use the compromised server as a launchpad for further attacks. The Remote Code Inclusion aspect significantly elevates the risk, as it bypasses typical input validation and allows direct execution of malicious code.

1. Reserved2026-02-17
2. Published2026-03-25
3. Modified2026-04-28
4. EPSS updated2026-04-02

The primary mitigation is to upgrade to a patched version of the Total Poll Lite plugin as soon as it becomes available. Until a patch is released, consider temporarily disabling the plugin to prevent exploitation. Implement strict file access controls on the WordPress server to limit the attacker's ability to upload and execute malicious files. Web Application Firewalls (WAFs) can be configured with rules to detect and block attempts to include remote files. Monitor WordPress logs for suspicious activity, particularly attempts to access or modify plugin files.

Active installs

1KNiche

Plugin rating