Sided

Sided has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Sided has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. Sided is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Sided vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-50554

Sided <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Sided banner
Latestv1.4.14
0.0(0)
0/100
Last Updated
2026-04-22 (5mo ago)
Active Installs
10+
Downloads
3,884
Requires WP
4.7+
Requires PHP
7.0+
Tested up to
WP 6.5.10
Created
2023-01-17 (4y ago)

Sided is a polling platform that allows you to easily create and insert polls into your content. Turn poll comments on to generate even more engagement on your site. To activate the Sided plugin, enter your API key on the settings page – you can find this key in the Sided dashboard at sided.co. After activating the plugin, view a full list of all polls on your dashboard. Create new polls from this dashboard, or use the “Create poll” block to add new polls while editing your posts. Use the “Select poll” block to insert existing polls into your posts. Major features in Sided include: A dashboard for viewing all debates. A list of all debates with the link, status, published date, and short code displayed. Create a new debate from the dashboard or the new post page. While creating, debate preview. Supports debate short codes for easy embedding in posts. Third Party This plugin loads a javascript from https://cdn.sided.co which sends events data of the plugin to google firebase analytics. More details about can be found here https://firebase.google.com/docs/analytics. Usage policy https://firebase.google.com/policies/analytics

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C