WP Voting Contest Lite

WP Voting Contest Lite has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. WP Voting Contest Lite is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage33%
Open

2

Fixed

1

Get automatic notifications for all WP Voting Contest Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-60086

Voting Contest <= 5.8 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records
WP Voting Contest Lite banner
Latestv6.0

WP Voting Contest Lite

Matt

Author

Matt

3.1(15)
62/100
Last Updated
2026-07-31 (1mo ago)
Active Installs
400+
Downloads
32,496
Requires WP
5.3.0+
Requires PHP
8.2+
Tested up to
WP 7.0.4
Created
2018-06-14 (8y ago)

Easy to use voting contest plugin for WordPress. Simply let users vote photos/images in your Contests. Installing and activating this plugin will place a vote button and a vote count below each photo of all contestants images using the [showcontestants id=’category id’] shortcode. Note: Only logged in users can vote in Lite version! PRO VERSION The all-in-one WordPress Contest plugin. Start an Audio Contest, Video Contest, Photo Contest, or Essay Contest using a single plugin. Online Demo You can try out the Online demonstration to see how the plugin works. To login, go to the Demo dashboard and login with credentials displayed.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C