Totalsoft

Products

Product	CVEs	Exploited	Latest
Event Calendar – Calendar (WordPress plugin)	2	–	Sep 21, 2022
TS Poll	2	–	Feb 19, 2026
TS Poll – Survey, Versus Poll, Image Poll, Video Poll	2	–	Apr 15, 2025
Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery	2	–	Dec 6, 2024
Portfolio Gallery	1	–	Dec 31, 2025
WooCommerce Pricing – Product Pricing	1	–	Feb 23, 2025

CVE-2026-25428 Medium 4.4 WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2025-62098 Medium 5.4 WordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerability 0.2%
CVE-2025-68588 Medium 4.3 WordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerability 0.2%
CVE-2025-3470 Medium 4.9 TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.4%
CVE-2025-22632 High 7.1 WordPress WooCommerce Pricing – Product Pricing plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2024-10247 High 7.2 YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection 0.5%
CVE-2024-9769 Medium 4.4 Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
CVE-2024-9022 High 7.2 TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter 1.0%
CVE-2022-36390 Medium 4.1 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability 0.6%
CVE-2022-38067 Medium 6.5 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability 0.7%