TotalSuite

Products

ProductCVEsExploitedLatest
Total Poll Lite4–Apr 8, 2026
TotalContest Lite2–Mar 20, 2026

Exploited and recent CVEs

  • CVE-2026-39651 Medium 6.5 WordPress Total Poll Lite plugin <= 4.12.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-27044 Critical 9.9 WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability 0.3%
  • CVE-2026-0677 Medium 6.3 WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability 0.2%
  • CVE-2025-23782 High 7.1 WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-27449 Medium 6.3 WordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-32821 Medium 4.3 WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability 0.4%