Totalsoft vulnerabilities
10 published CVEs name Totalsoft among the affected products.
- Published CVEs
- 10
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20222
- 20243
- 20254
- 20261
Newest CVEs
- CVE-2026-25428
WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability
totalsoft · TS Poll
Medium4.4 - CVE-2025-62098
WordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerability
totalsoft · Portfolio Gallery
Medium5.4 - CVE-2025-68588
WordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerability
totalsoft · TS Poll
Medium4.3 - CVE-2025-3470
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter
totalsoft · TS Poll – Survey, Versus Poll, Image Poll, Video Poll
Medium4.9 - CVE-2025-22632
WordPress WooCommerce Pricing – Product Pricing plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
totalsoft · WooCommerce Pricing – Product Pricing
High7.1 - CVE-2024-10247
YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection
totalsoft · Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery
High7.2 - CVE-2024-9769
Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
totalsoft · Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery
Medium4.4 - CVE-2024-9022
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
totalsoft · TS Poll – Survey, Versus Poll, Image Poll, Video Poll
High7.2 - CVE-2022-36390
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Totalsoft · Event Calendar – Calendar (WordPress plugin)
Medium4.1 - CVE-2022-38067
WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability
Totalsoft · Event Calendar – Calendar (WordPress plugin)
Medium6.5