Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Totalsoft vulnerabilities

10 published CVEs name Totalsoft among the affected products.

Published CVEs
10
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 3Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20222
  2. 20243
  3. 20254
  4. 20261

Newest CVEs

  • CVE-2026-25428

    WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability

    totalsoft · TS Poll

    Medium4.4
  • CVE-2025-62098

    WordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerability

    totalsoft · Portfolio Gallery

    Medium5.4
  • CVE-2025-68588

    WordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerability

    totalsoft · TS Poll

    Medium4.3
  • CVE-2025-3470

    TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter

    totalsoft · TS Poll – Survey, Versus Poll, Image Poll, Video Poll

    Medium4.9
  • CVE-2025-22632

    WordPress WooCommerce Pricing – Product Pricing plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

    totalsoft · WooCommerce Pricing – Product Pricing

    High7.1
  • CVE-2024-10247

    YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection

    totalsoft · Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery

    High7.2
  • CVE-2024-9769

    Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

    totalsoft · Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery

    Medium4.4
  • CVE-2024-9022

    TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter

    totalsoft · TS Poll – Survey, Versus Poll, Image Poll, Video Poll

    High7.2
  • CVE-2022-36390

    WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Totalsoft · Event Calendar – Calendar (WordPress plugin)

    Medium4.1
  • CVE-2022-38067

    WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

    Totalsoft · Event Calendar – Calendar (WordPress plugin)

    Medium6.5