WP Voting Contest Lite
WP Voting Contest Lite has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.
3 independent researchers contributed these findings, one record each. WP Voting Contest Lite is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-60086Voting Contest <= 5.8 - Missing Authorization
Read the full analysisVulnerability Records

WP Voting Contest Lite
Author
Matt
Easy to use voting contest plugin for WordPress. Simply let users vote photos/images in your Contests. Installing and activating this plugin will place a vote button and a vote count below each photo of all contestants images using the [showcontestants id=’category id’] shortcode. Note: Only logged in users can vote in Lite version! PRO VERSION The all-in-one WordPress Contest plugin. Start an Audio Contest, Video Contest, Photo Contest, or Essay Contest using a single plugin. Online Demo You can try out the Online demonstration to see how the plugin works. To login, go to the Demo dashboard and login with credentials displayed.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C