LiquidPoll – Polls, Surveys, NPS and Feedback Reviews

LiquidPoll – Polls, Surveys, NPS and Feedback Reviews has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all LiquidPoll – Polls, Surveys, NPS and Feedback Reviews vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2024-7134

LiquidPoll <= 3.3.78 - Unauthenticated Stored Cross-Site Scripting via form_data Parameter

Read the full analysis

Vulnerability Records

4 records


2024-08-20 17:21	LiquidPoll <= 3.3.78 - Unauthenticated Stored Cross-Site Scripting via form_data Parameter LiquidPoll <= 3.3.78	`CVE-2024-7134`	7.2 High	zer0gh0st	No
2024-08-01 00:00	LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.77 - Unauthenticated Stored Cross-Site Scripting LiquidPoll <= 3.3.77	`CVE-2024-39655`	7.2 High	Joshua Chan	Yes
2024-03-21 00:00	LiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure LiquidPoll <= 3.3.76	`CVE-2024-2080`	4.3 Medium	Francesco Carlucci	Yes
2023-06-28 00:00	LiquidPoll – Advanced Polls for Creators and Brands <= 3.3.68 - Missing Authorization via activate_addon LiquidPoll <= 3.3.68	`CVE-2023-36531`	4.3 Medium	Abdi Pranata	Yes

Showing 1–4 of 4 reports