[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG4PVqkm3mloJ1g8uFwzoFtr1SnBrRK_awIZC7LXutKI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":76,"crawl_stats":38,"alternatives":84,"analysis":189,"fingerprints":891},"democracy-poll","Democracy Poll","6.1.1","Timur Kamaev","https:\u002F\u002Fprofiles.wordpress.org\u002Ftkama\u002F","\u003Cp>This plugin provides an intuitive and powerful system to create polls with features like:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Single and multiple voting options (customizable)\u003C\u002Fli>\n\u003Cli>Allowing visitors to add custom answers (optional)\u003C\u002Fli>\n\u003Cli>Setting an end date for polls\u003C\u002Fli>\n\u003Cli>Restricting voting to registered users (optional)\u003C\u002Fli>\n\u003Cli>Multiple poll designs\u003C\u002Fli>\n\u003Cli>And more — see the changelog for details\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Democracy Poll\u003C\u002Fstrong> is compatible with major cache plugins, including WP Total Cache, WP Super Cache, Wordfence, Quick Cache, and others.\u003C\u002Fp>\n\u003Cp>Designed for ease of use and performance, it offers:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>A “Quick Edit” button for admins, shown directly above a poll\u003C\u002Fli>\n\u003Cli>A plugin menu in the admin toolbar\u003C\u002Fli>\n\u003Cli>Inline inclusion of CSS & JS\u003C\u002Fli>\n\u003Cli>Conditional loading of CSS & JS (only when needed)\u003C\u002Fli>\n\u003Cli>And more — check the changelog for details\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>More Info\u003C\u002Fh3>\n\u003Cp>Democracy Poll is a modern version of the original, well-regarded plugin by the same name. Although Andrew Sutherland’s version hadn’t been updated since 2006, it introduced the innovative idea of allowing users to add their own answers. This version retains the core idea and name, but features fully rewritten code.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create new polls\u003C\u002Fli>\n\u003Cli>Cache plugin compatibility (e.g. WP Total Cache, WP Super Cache)\u003C\u002Fli>\n\u003Cli>Option to allow users to add their own answers\u003C\u002Fli>\n\u003Cli>Multi-voting support\u003C\u002Fli>\n\u003Cli>Poll auto-closing after a specified end date\u003C\u002Fli>\n\u003Cli>Display random polls\u003C\u002Fli>\n\u003Cli>Restrict voting to registered users (optional)\u003C\u002Fli>\n\u003Cli>“Edit” button for admins for quick poll management\u003C\u002Fli>\n\u003Cli>Edit vote counts\u003C\u002Fli>\n\u003Cli>Option to let users change their votes\u003C\u002Fli>\n\u003Cli>Voter tracking via IP, cookies, or WP user ID (optional vote clearing)\u003C\u002Fli>\n\u003Cli>Embed polls in posts via \u003Ccode>[democracy]\u003C\u002Fcode> shortcode (visual editor button available)\u003C\u002Fli>\n\u003Cli>Widget support (optional)\u003C\u002Fli>\n\u003Cli>Admin bar menu for easy access (optional)\u003C\u002Fli>\n\u003Cli>Option to disable or inline CSS\u002FJS\u003C\u002Fli>\n\u003Cli>Add custom notes under polls\u003C\u002Fli>\n\u003Cli>Customize designs via CSS themes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Multisite support is available from version 5.2.4.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch3>Widget\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Ccode>WP Admin \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Appearance \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Widgets\u003C\u002Fcode> and add the \u003Ccode>Democracy Poll\u003C\u002Fcode> widget\u003C\u002Fli>\n\u003Cli>Place it in a sidebar\u003C\u002Fli>\n\u003Cli>Configure settings\u003C\u002Fli>\n\u003Cli>Done\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Template Code\u003C\u002Fh3>\n\u003Cp>In your theme file (e.g. \u003Ccode>sidebar.php\u003C\u002Fcode>), add:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php if ( function_exists( 'democracy_poll' ) ) { ?>\n    \u003Cdiv class=\"sidebar-section\">\n        \u003Ch2>Polls\u003C\u002Fh2>\n        \u003Cdiv class=\"my-poll\">\n            \u003C?php democracy_poll(); ?>\n        \u003C\u002Fdiv>\n    \u003C\u002Fdiv>\n\u003C?php } ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>To show a specific poll: \u003Ccode>\u003C?php democracy_poll( 3 ); ?>\u003C\u002Fcode> (replace \u003Ccode>3\u003C\u002Fcode> with your poll ID)\u003C\u002Fli>\n\u003Cli>To embed a specific poll in a post, use \u003Ccode>[democracy id=\"2\"]\u003C\u002Fcode> shortcode.\u003C\u002Fli>\n\u003Cli>To embed a random poll in a post, use \u003Ccode>[democracy]\u003C\u002Fcode> shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Poll Archive\u003C\u002Fh4>\n\u003Cp>To show the poll archive:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php democracy_archives( $hide_active, $before_title, $after_title ); ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","WordPress polls plugin with multiple-choice, custom answers, cache compatibility, widgets, and shortcodes.",7000,202224,92,86,"2025-08-04T06:19:00.000Z","6.8.5","5.8","7.4",[20,21,22,23,24],"democracy","polls","review","survey","vote","https:\u002F\u002Fwp-kama.ru\u002F67","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdemocracy-poll.zip",75,3,1,"2024-04-29 00:00:00","2026-03-15T15:16:48.613Z",[33,47,63],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":38},"CVE-2024-33920","democracy-poll-missing-authorization","Democracy Poll \u003C= 6.0.3 - Missing Authorization","The Democracy Poll plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.0.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.",null,"\u003C=6.0.3","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2024-05-07 14:11:50",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb29144f7-08cb-4703-a977-4fece763abbd?source=api-prod",{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":38,"affected_versions":52,"patched_in_version":53,"severity":54,"cvss_score":55,"cvss_vector":56,"vuln_type":57,"published_date":58,"updated_date":59,"references":60,"days_to_patch":62},"CVE-2017-18521","democracy-poll-cross-site-request-forgery","Democracy Poll \u003C= 5.3.6 - Cross-Site Request Forgery","The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin\u002Foptions-general.php?page=democracy-poll&subpage=l10n.","\u003C=5.3.6","5.4","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Cross-Site Request Forgery (CSRF)","2017-02-23 00:00:00","2024-01-22 19:56:02",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb9567f63-9161-49a3-9b94-dd6dee5a5628?source=api-prod",2525,{"id":64,"url_slug":65,"title":66,"description":67,"plugin_slug":4,"theme_slug":38,"affected_versions":68,"patched_in_version":53,"severity":40,"cvss_score":69,"cvss_vector":70,"vuln_type":71,"published_date":72,"updated_date":59,"references":73,"days_to_patch":75},"CVE-2017-18520","democracy-poll-cross-site-scripting","Democracy Poll \u003C 5.4 - Cross-Site Scripting","The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin\u002Fclass.DemAdminInit.php.","\u003C5.4",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2017-02-22 00:00:00",[74],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F56acae44-6f22-440c-bee1-4cd3831a99ec?source=api-prod",2526,{"slug":77,"display_name":7,"profile_url":8,"plugin_count":78,"total_installs":79,"avg_security_score":80,"avg_patch_time_days":81,"trust_score":82,"computed_at":83},"tkama",5,22200,85,1448,69,"2026-04-03T21:29:03.360Z",[85,111,132,150,168],{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":96,"last_updated":97,"tested_up_to":98,"requires_at_least":99,"requires_php":100,"tags":101,"homepage":105,"download_link":106,"security_score":107,"vuln_count":108,"unpatched_count":109,"last_vuln_date":110,"fetched_at":31},"polldaddy","Crowdsignal Dashboard – Polls, Surveys & more","3.1.5","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>The Crowdsignal Dashboard plugin allows you to create and manage polls, surveys, quizzes, and ratings from within your WordPress admin. See all your projects in one place, be they surveys, quizzes and polls made on Crowdsignal.com or any of our poll and survey blocks using our Crowdsignal Forms plugin. With just one click view all results for your responses as they come in to analyze responses in real time and export your results everywhere!\u003C\u002Fp>\n\u003Ch3>The Block Editor\u003C\u002Fh3>\n\u003Cp>Are you using the new block editor for WordPress? Our other plugin, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcrowdsignal-forms\u002F\" rel=\"ugc\">Crowdsignal Forms\u003C\u002Fa> provides a number of blocks for your post editor that allow you to gather actionable feedback from your audience:\u003Cbr \u002F>\n* Poll: Create polls and get your audience’s opinion.\u003Cbr \u002F>\n* Survey Embed: Create surveys in minutes with 14 question types and embed them into your page.\u003Cbr \u002F>\n* Feedback Button: A floating and always visible button that allows your audience to share feedback anytime.\u003Cbr \u002F>\n* Measure NPS: Calculate your Net Promoter Score! Collect feedback and track customer satisfaction over time.\u003Cbr \u002F>\n* Voting: Allow your audience to rate your work or express their opinion.\u003Cbr \u002F>\n* Applause: Let your audience cheer with a big round of applause.\u003C\u002Fp>\n\u003Cp>Learn more about the Crowdsignal Forms plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcrowdsignal-forms\u002F\" rel=\"ugc\">here\u003C\u002Fa>, and on \u003Ca href=\"https:\u002F\u002Fcrowdsignal.com\u002F\" rel=\"nofollow ugc\">crowdsignal.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Want to help translate the plugin or keep an existing translation up-to-date? Head on over to the \u003Ca href=\"http:\u002F\u002Ftranslate.wordpress.com\u002Fprojects\u002Fpolldaddy\u002Fplugin\" rel=\"nofollow ugc\">translation site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Some strings are not translated when polls and surveys are embedded. You will have to translate them using a language pack on \u003Ca href=\"https:\u002F\u002Fcrowdsignal.com\u002F\" rel=\"nofollow ugc\">Crowdsignal.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Development of the plugin takes place in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FAutomattic\u002Fcrowdsignal-plugin\" rel=\"nofollow ugc\">this GitHub repository\u003C\u002Fa>. Contributions are welcome!\u003C\u002Fp>\n\u003Ch3>The Classic Editor\u003C\u002Fh3>\n\u003Cp>If you are a long time user of this plugin and you still use the classic post editor, the best way to create polls is through your \u003Ca href=\"https:\u002F\u002Fapp.crowdsignal.com\u002Fdashboard\u002F\" rel=\"nofollow ugc\">Crowdsignal account\u003C\u002Fa> where you have a number of different ways to share polls (and surveys). However, up to version 2.2.6, this plugin had an “Add Poll” button above the post editor that opened a very basic poll editor. That “Add Poll” button has since been removed but if you would still like to use it, open up the wp-admin dashboard on your WordPress site. Add “admin.php?page=polls&action=create-poll” to the end of the URL, after “wp-admin\u002F” so it looks like https:\u002F\u002Fexample.com\u002Fwp-admin\u002Fadmin.php?page=polls&action=create-poll and you will see the old poll editor. Bookmark that URL if you still want to use that poll editor. We do not recommend using version 2.2.6 of the plugin as you will miss out on many bug fixes and new features added since then.\u003C\u002Fp>\n","Manage your Crowdsignal polls, surveys, quizzes, and ratings directly from the WordPress dashboard.",100000,1258006,54,34,"2026-02-25T16:33:00.000Z","6.9.4","5.5","5.6",[102,21,103,104,24],"polling","rating","surveys","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpolldaddy\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpolldaddy.3.1.5.zip",96,9,0,"2024-09-24 00:00:00",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":119,"downloaded":120,"rating":121,"num_ratings":78,"last_updated":122,"tested_up_to":98,"requires_at_least":123,"requires_php":124,"tags":125,"homepage":128,"download_link":129,"security_score":130,"vuln_count":108,"unpatched_count":109,"last_vuln_date":131,"fetched_at":31},"cp-polls","Polls CP","1.0.82","codepeople","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodepeople\u002F","\u003Cp>Polls CP features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Classic one-click radio-button polls  \u003C\u002Fli>\n\u003Cli>Advanced polls with dependant questions\u003C\u002Fli>\n\u003Cli>Export results to Excel \u002F CSV\u003C\u002Fli>\n\u003Cli>Printable list of votes\u003C\u002Fli>\n\u003Cli>Visual drag and drop form builder \u003C\u002Fli>\n\u003Cli>Anti-spam captcha \u003C\u002Fli>\n\u003Cli>Field validation\u003C\u002Fli>\n\u003Cli>Graphic reports\u003C\u002Fli>\n\u003Cli>Printable reports\u003C\u002Fli>\n\u003Cli>Email notifications\u003C\u002Fli>\n\u003Cli>Automatic email reports\u003C\u002Fli>\n\u003Cli>… and more features (see below)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With \u003Cstrong>Polls CP\u003C\u002Fstrong> you can publish a poll into a page\u002Fpost and optionally display statistics of the results. You can receive email notifications every time a vote is added or opt to receive Excel reports periodically.\u003C\u002Fp>\n\u003Cp>The Polls can have dependant questions, this means that some questions are displayed depending of the selection made on other questions.\u003C\u002Fp>\n\u003Ch4>More about the Main Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Votes can be limited to one per user:\u003C\u002Fstrong> Poll votes can be limited to one per user based in cookies or IP verification. Can be also set to accept unlimited votes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Interactive questions:\u003C\u002Fstrong> The questions can be shown or hidden depending of the selection made on previous questions. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>All languages supported:\u003C\u002Fstrong> Visually configurable\u002Feditable for any language. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email delivery \u002F notifications:\u003C\u002Fstrong> The poll votes can be by email to one or more email addresses.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Poll votes saved into the database:\u003C\u002Fstrong> For keeping a record of the received poll votes, generate statistics and export data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Printable list of votes:\u003C\u002Fstrong> Get the list of votes received from the poll form within a selected date range and print it.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export data to CSV\u002FExcel:\u003C\u002Fstrong> Export the polls data to a standard format that can be used by other applications.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic reports:\u003C\u002Fstrong> Provide automatic reports of the poll form usage and votes. Report of daily votes and accumulative hourly report. Printable reports for specific fields into the poll. Helps you to understand your data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic email reports:\u003C\u002Fstrong> Automatic reports sent to the indicated email addresses on a regular period.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Form Validation:\u003C\u002Fstrong> Set validation rules to avoid getting empty answers.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Anti-spam protection:\u003C\u002Fstrong> Built-it captcha anti-spam protection. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Drag and drop poll form builder:\u003C\u002Fstrong> A basic and easy to use poll form builder for customizing the poll fields and form validation.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable email messages:\u003C\u002Fstrong> Specify the text of the email notifications. Supports both plain text emails and HTML formatted emails.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi language support:\u003C\u002Fstrong> The poll form builder allows to enter the field labels and validations in any language. It supports special characters.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Votes List\u003C\u002Fh4>\n\u003Cp>The poll votes list helps to check the previous votes and print or export them. Includes a search\u002Ffilter form with the following options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Search for:\u003C\u002Fstrong> Search for a text into the poll votes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>From … to:\u003C\u002Fstrong> Date interval to be included in the list\u002Freports.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Item:\u003C\u002Fstrong> You can have more than one poll form. Select here if you want to get the results of a specific poll form or from all poll forms.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Filter:\u003C\u002Fstrong> Shows the list according to the selected filters\u002Foptions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export to CSV:\u003C\u002Fstrong> Export the CSV data according to the selected filters\u002Foptions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The CSV file will contain a first row with the field names and the next rows will contain one poll vote per row, with one for field on each column. This way you can easily import the data from other applications or just select the columns\u002Ffields that you need. A CSV file can be opened and managed using Excel.\u003C\u002Fp>\n\u003Cp>A print button below the list provides the poll votes in a printable format.\u003C\u002Fp>\n\u003Ch4>The Poll Reports\u003C\u002Fh4>\n\u003Cp>The reports section lets you \u003Cstrong>analyze the use of the poll forms\u003C\u002Fstrong> and the data entered into them. The first section of the reports is a filter section similar to the one that appears in the poll votes page. Below the filters section there are three graphical reports:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Votes per day:\u003C\u002Fstrong> The report will display in point-lines graphic how many poll votes have been received each day in the selected date range. This report can be used to evaluate the usage peaks and measure the impact of marketing actions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Votes per hour:\u003C\u002Fstrong> The report will display in a point-lines graphic how many poll votes are received on each hour of the date; this is for the total poll votes in the selected date range. This report can be used for checking peak hours and focus the marketing actions on those hours.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Report of values for a selected field:\u003C\u002Fstrong> Select any of the poll fields and other information fields (like date, IP address, hours) to get a report of how many times each value have been selected.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A print button at the end of the page can be used to print the report of the values for the selected poll field in a printer-friendly format.\u003C\u002Fp>\n\u003Ch4>Automatic Email Reports\u003C\u002Fh4>\n\u003Cp>The Polls CP plugin allows the setup of two types of automatic (periodical) email reports:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Global Email Reports:\u003C\u002Fstrong> Can be setup below the list of polls. This report sends a report with the new poll votes of all polls every the specified number of days.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Poll Email Reports:\u003C\u002Fstrong> Can be setup on the settings page of each poll. This report sends a report with the new poll votes of the related poll every the specified number of days.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The reports are attached in a CSV \u002F Excel file into the emails. In both cases the destination email addresses, email subject, email text and the report’s interval can be specified. More info available in the section “Other Notes”.\u003Cbr \u002F>\n\u003Cstrong>Opening the poll votes in Excel:\u003C\u002Fstrong> Go either to the “Reports” or “Votes” section. There is a button labeled “Export to CSV”. CSV files can be opened in Excel, just double-click the downloaded CSV file, it will contain the selected poll votes, one per line.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Deleting a poll vote:\u003C\u002Fstrong> Go to the “Votes” section and use the button labeled “Delete” for the poll vote you want to delete. Each row in that list is a poll vote.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Customizing the captcha image:\u003C\u002Fstrong> The captcha image used in the poll form is 100% implemented into the plugin, this way you don’t need to rely on third party services\u002Fservers. In addition to the settings for customizing the captcha design you can also replace the font files located into the folder “cp-polls\u002Fcaptcha\u002F”. The fonts are used as base for rendering the captcha on the poll form.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Poll vote notification email format:\u003C\u002Fstrong> The notifications emails sent from the poll form can be either plain-text emails or HTML emails. Plain text emails are preferred in most cases since are easier to edit and pass the anti-spam filters with more probability.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Poll Clone button:\u003C\u002Fstrong> The clone button duplicates a complete poll with its settings. The poll votes and statistics aren’t duplicated.\u003C\u002Fp>\n\u003Ch4>Custom poll vote button\u003C\u002Fh4>\n\u003Cp>There is a settings section info each form that allows to specify the label of the vote button.\u003C\u002Fp>\n\u003Cp>The class=”pbSubmit” can be used to modify the button styles.\u003C\u002Fp>\n\u003Cp>The styles can be applied into any of the CSS files of your theme or add the needed styles into the “Customization area >> Add Custom Styles” (at the bottom of the page that contains the list of polls).\u003C\u002Fp>\n\u003Cp>For further modifications the vote button is located at the end of the file “cp-public-int.inc.php”.\u003C\u002Fp>\n\u003Ch4>Customizing the automatic email reports\u003C\u002Fh4>\n\u003Cp>The settings for the email reports (both the global and per form reports) include the following configuration fields:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Enable Reports?:\u003C\u002Fstrong> Option for enabling \u002F disabling the reports.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send report every:\u003C\u002Fstrong> Indicate every how many days the reports will be sent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send after this hour (server time):\u003C\u002Fstrong> Approximate time at which the reports will be sent. This time is based on the server time. Some activity is needed on the website for sending the reports. You can setup a cron for a more exact delivery time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send email from:\u003C\u002Fstrong> The “from” email used for the reports. Avoid @aol.com and @hotmail.com “from” addresses to skip the anti-spam filters.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send to email(s):\u003C\u002Fstrong> The list of emails (comma separated) that will receive the reports.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email subject:\u003C\u002Fstrong> Subject of the email that will be sent with the poll reports.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email format?:\u003C\u002Fstrong> Format of the email that will be sent with the poll reports. Can be HTML or Plain Text. In most cases plain text is easier to setup and has less problems with anti-spam services.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Text (CSV file will be attached):\u003C\u002Fstrong> Content of the email that will contain the poll reports. The reports will be attached in CSV format into the email.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>The poll votes database\u003C\u002Fh4>\n\u003Cp>The votes received via the poll form are stored into the WordPress database table “wp_cppolls_messages”. You can export that data in form of automatic email reports or in CSV\u002FExcel format from the votes list area. If needed you can also query that table directly for further processing of the poll votes.\u003C\u002Fp>\n\u003Ch4>Importing votes\u003C\u002Fh4>\n\u003Cp>There is an option to import votes into the Polls CP plugin. That option is located below the votes list and is labeled “Import CSV”.\u003C\u002Fp>\n\u003Cp>The votes can be imported in a comma separated CSV file. One record per line, one field per column. Don’t use a header row with the field names.\u003C\u002Fp>\n\u003Cp>The first 3 columns into the CSV file are the time, IP address and email address, if you don’t have this information then leave the first three columns empty. After those initial columns the fields (columns) must appear in the same order than in the form.\u003C\u002Fp>\n\u003Cp>Sample format for the CSV file:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>2013-04-21 18:50:00, 192.168.1.12, john@sample.com, \"john@sample.com\", \"sample subject\", \"sample message\"\n2013-05-16 20:49:00, 192.168.1.24, jane.smith@sample.com, \"jane.smith@sample.com\", \"other subject\", \"other message\"\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>From address used for the emails\u003C\u002Fh4>\n\u003Cp>Into the “Form Processing \u002F Email Settings” section the first settings field is named “Send email “From” and has the following options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>From fixed email address indicated below – Recommended option:\u003C\u002Fstrong>  If you select “from fixed…” the customer email address will appear in the “to” address when you hit “reply”, this is the recommended setting to avoid mail server restrictions.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>From the email address indicated by the customer:\u003C\u002Fstrong> This option isn’t available in this version since the poll form builder doesn’t have the email field.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>The drag and drop poll form builder\u003C\u002Fh4>\n\u003Cp>The Poll Form Builder lets you to add\u002Fedit\u002Fremove fields into the poll form and also to specify the validation rules for your poll form (required fields).\u003C\u002Fp>\n\u003Cp>In other versions of the plugin the following field types are also available: Numeric field with specific validations, Date-picker, Checkboxes, Multiple Choice, Dropdown \u002F Select, Upload file fields, Password, Phone with specific validations, static texts, test fields, email fields, textarea fields, section breaks and page breaks for multi-page poll forms.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Other features in the poll form builder:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Dependent fields:\u003C\u002Fstrong> Use this feature for show\u002Fhide fields (any field type) based in the selection made on other fields (radiobuttons fields or also checkboxes and drop-down fields if available).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Editing the field settings in the Poll Form Builder:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>When you click a field already added into the poll form builder area, you can edit its details and validation rules. The following properties are available:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Field Label:\u003C\u002Fstrong> Label for the field in the public poll form and into the email.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Field tag for the message:\u003C\u002Fstrong> In addition to the general %INFORMATION% tag, you can use this tag to show the field value into a specific tag of the email. More info at the WordPress Polls CP FAQ.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Specific settings:\u003C\u002Fstrong> The settings depends of the field type.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Validation rule:\u003C\u002Fstrong> The validation rules depends of the field type, the most common is “required”.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Predefined value:\u003C\u002Fstrong> Pre-filled value for the field, if any.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Instructions for user:\u003C\u002Fstrong> This text will appear in a smaller form below the field. It’s useful for giving instructions to the user.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add CSS layout keywords:\u003C\u002Fstrong> Customize the look & feel. More info at the WordPress Polls CP FAQ.\u003C\u002Fli>\n\u003C\u002Ful>\n","Create classic polls and advanced polls with dependant questions. Voting \u002F survey system.",500,43590,52,"2025-12-11T12:38:00.000Z","3.0.5","",[126,21,23,24,127],"poll","voting","https:\u002F\u002Fwordpress.dwbooster.com\u002Fforms\u002Fcp-polls","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcp-polls.1.0.82.zip",94,"2025-06-19 00:00:00",{"slug":133,"name":134,"version":135,"author":136,"author_profile":137,"description":138,"short_description":139,"active_installs":140,"downloaded":141,"rating":142,"num_ratings":29,"last_updated":143,"tested_up_to":144,"requires_at_least":145,"requires_php":124,"tags":146,"homepage":148,"download_link":149,"security_score":80,"vuln_count":109,"unpatched_count":109,"last_vuln_date":38,"fetched_at":31},"poll-and-survey","Poll And Survey plugin","1.01","techmix","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechmix\u002F","\u003Cp>This poll and survey plugin allows you to run any customized survey, poll or vote in your website. It could help you to get visitors\u002Fusers openions easily. You can run any kind of survey by using this plugin. There are quite a lot of benefits for using this Poll And survey plugin like:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Super easy to use\u003C\u002Fli>\n\u003Cli>Unique design\u003C\u002Fli>\n\u003Cli>Inclued customized voting system\u003C\u002Fli>\n\u003Cli>It is a powerful survey tool\u003C\u002Fli>\n\u003Cli>You can engage more visitors\u002Fusers by poll and survey\u003C\u002Fli>\n\u003Cli>Widget support\u003C\u002Fli>\n\u003Cli>Shortcode support\u003C\u002Fli>\n\u003C\u002Ful>\n","This poll and survey plugin allows you to run any customized survey, poll or vote in your website. It could help you to get visitors\u002Fusers openions ea &hellip;",10,2154,100,"2020-12-12T05:12:00.000Z","5.6.17","3.0.1",[20,126,147,23,24],"quiz","https:\u002F\u002Ftechmix.xyz\u002Fdownloads\u002Fpoll-and-survey-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpoll-and-survey.zip",{"slug":151,"name":152,"version":153,"author":89,"author_profile":90,"description":154,"short_description":155,"active_installs":93,"downloaded":156,"rating":142,"num_ratings":28,"last_updated":157,"tested_up_to":98,"requires_at_least":158,"requires_php":159,"tags":160,"homepage":164,"download_link":165,"security_score":166,"vuln_count":29,"unpatched_count":29,"last_vuln_date":167,"fetched_at":31},"crowdsignal-forms","Crowdsignal Forms","1.8.0","\u003Cp>The Crowdsignal Forms plugin allows you to create and manage polls right from within the block editor.\u003Cbr \u002F>\nCreating polls is as simple and as fast as writing a bullet point list. No embed blocks and no copy pasting needed anymore.\u003C\u002Fp>\n\u003Cp>Customize the look and feel of your polls to match your brand, and pick your favorite color. The poll block supports the styling of your theme by default, and from there you can customize the styling of your polls the way you want.\u003C\u002Fp>\n\u003Cp>With Crowdsignal’s results page you can view all responses as they come in. See the geo-locations of your voters and analyze IP addresses for any suspicious voting behavior. See advanced stats and analytics for understanding your audience.\u003C\u002Fp>\n\u003Cp>Analyze your results and then export them in a number of different formats.\u003C\u002Fp>\n\u003Cp>Set close dates for polls, create polls with single or multiple choice answers, choose whether to show your readers the poll results or keep them private.\u003C\u002Fp>\n\u003Cp>You can create an unlimited number of polls with a free \u003Ca href=\"https:\u002F\u002Fcrowdsignal.com\u002F\" rel=\"nofollow ugc\">Crowdsignal\u003C\u002Fa> account and your first 2,500 signals are free. A signal is a response you get to a poll. If you are on a free plan, you still have full access to the first 2,500 signals. Any further responses you collect will still be recorded but if you \u003Ca href=\"https:\u002F\u002Fcrowdsignal.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">upgrade\u003C\u002Fa> you will get access to our unlocked reports to see them. You’ll also get access to a \u003Ca href=\"https:\u002F\u002Fcrowdsignal.com\u002Ffeatures\u002F\" rel=\"nofollow ugc\">range of features\u003C\u002Fa> not available to free users.\u003C\u002Fp>\n","The Crowdsignal Forms plugin allows you to create and manage polls right from within the block editor.",137183,"2026-02-10T14:53:00.000Z","6.0","5.6.20",[161,162,163,21,104],"block","forms","gutenberg","https:\u002F\u002Fcrowdsignal.com\u002Fcrowdsignal-forms\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcrowdsignal-forms.1.8.0.zip",78,"2025-12-27 00:00:00",{"slug":169,"name":170,"version":171,"author":172,"author_profile":173,"description":174,"short_description":175,"active_installs":176,"downloaded":177,"rating":178,"num_ratings":179,"last_updated":180,"tested_up_to":181,"requires_at_least":182,"requires_php":124,"tags":183,"homepage":185,"download_link":186,"security_score":178,"vuln_count":187,"unpatched_count":109,"last_vuln_date":188,"fetched_at":31},"wp-polls","WP-Polls","2.77.3","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Cp>WP-Polls is extremely customizable via templates and css styles and there are tons of options for you to choose to ensure that WP-Polls runs the way you wanted. It now supports multiple selection of answers.\u003C\u002Fp>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-polls\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-polls\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-polls\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fwww.freepik.com\" rel=\"nofollow ugc\">Freepik\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n","Adds an AJAX poll system to your WordPress blog. You can also easily add a poll into your WordPress's blog post\u002Fpage.",40000,3677700,84,136,"2025-01-18T03:07:00.000Z","6.7.5","4.9.6",[184,126,102,21,24],"booth","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-polls.2.77.3.zip",6,"2025-01-21 14:08:11",{"attackSurface":190,"codeSignals":295,"taintFlows":773,"riskAssessment":873,"analyzedAt":890},{"hooks":191,"ajaxHandlers":275,"restRoutes":284,"shortcodes":285,"cronEvents":292,"entryPointCount":293,"unprotectedCount":294},[192,198,204,208,213,217,222,226,230,234,238,242,246,251,254,256,258,260,265,270],{"type":193,"name":194,"callback":195,"priority":140,"file":196,"line":197},"filter","plugin_action_links","_plugin_action_setting_page_link","classes\\Admin\\Admin.php",21,{"type":199,"name":200,"callback":201,"file":202,"line":203},"action","admin_menu","register_option_page","classes\\Admin\\Admin_Page.php",39,{"type":193,"name":205,"callback":206,"priority":140,"file":202,"line":207},"set-screen-option","closure",42,{"type":199,"name":209,"callback":206,"priority":210,"file":211,"line":212},"admin_enqueue_scripts",99,"classes\\Admin\\Admin_Page_Design.php",24,{"type":199,"name":214,"callback":215,"priority":210,"file":211,"line":216},"admin_bar_menu","add_toolbar_node",58,{"type":193,"name":218,"callback":219,"priority":140,"file":220,"line":221},"gettext_with_context","handle_front_l10n","classes\\Admin\\Admin_Page_l10n.php",152,{"type":199,"name":223,"callback":224,"file":225,"line":140},"add_meta_boxes","add_meta_box","classes\\Admin\\Post_Metabox.php",{"type":199,"name":227,"callback":228,"priority":140,"file":225,"line":229},"save_post","on_save_post",11,{"type":193,"name":231,"callback":232,"file":233,"line":229},"mce_external_plugins","tinymce_plugin","classes\\Admin\\Tinymce_Button.php",{"type":193,"name":235,"callback":236,"file":233,"line":237},"mce_buttons","tinymce_register_button",12,{"type":193,"name":239,"callback":240,"file":233,"line":241},"wp_mce_translation","tinymce_l10n",13,{"type":199,"name":243,"callback":206,"file":244,"line":245},"admin_notices","classes\\Helpers\\Messages.php",80,{"type":199,"name":247,"callback":248,"file":249,"line":250},"switch_blog","set_db_tables","classes\\Plugin_Initor.php",20,{"type":199,"name":252,"callback":206,"file":249,"line":253},"widgets_init",68,{"type":199,"name":214,"callback":215,"priority":210,"file":249,"line":255},76,{"type":199,"name":257,"callback":206,"file":249,"line":13},"wp",{"type":199,"name":259,"callback":206,"file":249,"line":107},"wp_head",{"type":199,"name":261,"callback":262,"priority":210,"file":263,"line":264},"init","not_ajax_request_handler","classes\\Poll_Ajax.php",23,{"type":199,"name":266,"callback":267,"priority":229,"file":268,"line":269},"admin_footer","dem_widget_footer_js","classes\\Poll_Widget.php",63,{"type":199,"name":271,"callback":272,"file":273,"line":274},"after_setup_theme","\\DemocracyPoll\\init_plugin","democracy.php",31,[276,281],{"action":277,"nopriv":278,"callback":279,"hasNonce":278,"hasCapCheck":278,"file":263,"line":280},"dem_ajax",false,"ajax_request_handler",15,{"action":277,"nopriv":282,"callback":279,"hasNonce":278,"hasCapCheck":278,"file":263,"line":283},true,16,[],[286,289],{"tag":20,"callback":287,"file":288,"line":229},"democracy_shortcode","classes\\Shortcodes.php",{"tag":290,"callback":291,"file":288,"line":237},"democracy_archives","democracy_archives_shortcode",[],4,2,{"dangerousFunctions":296,"sqlUsage":297,"outputEscaping":400,"fileOperations":237,"externalRequests":109,"nonceChecks":28,"capabilityChecks":294,"bundledLibraries":769},[],{"prepared":203,"raw":298,"locations":299},47,[300,304,307,310,313,315,317,320,322,325,327,329,331,333,335,337,340,343,346,348,350,352,355,356,359,361,364,365,367,368,371,373,375,377,379,381,382,383,385,386,388,389,391,392,395,397,398],{"file":301,"line":302,"context":303},"classes\\Admin\\Admin_Page_Edit_Poll.php",401,"$wpdb->get_results() with variable interpolation",{"file":301,"line":305,"context":306},423,"$wpdb->get_row() with variable interpolation",{"file":301,"line":308,"context":309},451,"$wpdb->get_col() with variable interpolation",{"file":301,"line":311,"context":312},457,"$wpdb->query() with variable interpolation",{"file":301,"line":314,"context":312},461,{"file":301,"line":316,"context":303},471,{"file":301,"line":318,"context":319},517,"$wpdb->get_var() with variable interpolation",{"file":301,"line":321,"context":319},521,{"file":323,"line":324,"context":319},"classes\\Admin\\Admin_Page_Logs.php",61,{"file":323,"line":326,"context":312},114,{"file":323,"line":328,"context":303},146,{"file":323,"line":330,"context":312},189,{"file":323,"line":332,"context":312},215,{"file":323,"line":334,"context":312},222,{"file":323,"line":336,"context":312},229,{"file":338,"line":339,"context":312},"classes\\Admin\\Admin_Page_Other_Migrations.php",124,{"file":341,"line":342,"context":306},"classes\\Admin\\Admin_Page_Settings.php",342,{"file":344,"line":345,"context":303},"classes\\Admin\\List_Table_Logs.php",93,{"file":344,"line":347,"context":319},106,{"file":344,"line":349,"context":306},292,{"file":344,"line":351,"context":306},306,{"file":353,"line":354,"context":319},"classes\\Admin\\List_Table_Polls.php",49,{"file":353,"line":347,"context":303},{"file":357,"line":358,"context":306},"classes\\DemPoll.php",241,{"file":357,"line":360,"context":306},244,{"file":362,"line":363,"context":312},"classes\\Poll_Service.php",217,{"file":362,"line":334,"context":312},{"file":362,"line":366,"context":312},227,{"file":268,"line":107,"context":303},{"file":369,"line":370,"context":306},"classes\\Utils\\Activator.php",45,{"file":372,"line":80,"context":303},"classes\\Utils\\Migrator__WP_Polls.php",{"file":372,"line":374,"context":303},119,{"file":376,"line":96,"context":303},"classes\\Utils\\Upgrader.php",{"file":376,"line":378,"context":303},37,{"file":376,"line":380,"context":303},40,{"file":376,"line":370,"context":312},{"file":376,"line":354,"context":312},{"file":376,"line":384,"context":312},53,{"file":376,"line":95,"context":312},{"file":376,"line":387,"context":312},60,{"file":376,"line":324,"context":312},{"file":376,"line":390,"context":312},62,{"file":376,"line":269,"context":312},{"file":393,"line":394,"context":319},"includes\\theme-functions.php",279,{"file":396,"line":250,"context":312},"uninstall.php",{"file":396,"line":197,"context":312},{"file":396,"line":399,"context":312},22,{"escaped":210,"rawEcho":363,"locations":401},[402,405,407,409,411,412,414,416,418,420,422,424,426,427,429,431,433,435,437,439,441,443,445,447,449,450,451,453,455,457,458,460,462,463,465,467,469,471,473,475,477,479,481,483,485,487,489,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,540,542,544,546,547,549,551,553,554,555,557,559,561,563,565,567,568,569,570,572,574,576,578,579,581,583,585,587,589,591,593,595,597,598,600,602,603,604,605,606,608,610,612,614,616,618,619,620,622,624,626,627,629,630,631,634,635,636,638,639,640,641,642,643,644,645,647,649,650,652,654,656,657,658,660,662,664,666,668,669,670,671,673,675,677,679,681,683,685,687,689,690,691,693,694,696,698,700,702,704,706,707,709,710,712,714,716,718,719,721,723,724,726,727,728,730,732,733,734,735,736,737,739,740,742,743,744,745,746,748,750,752,753,755,756,757,759,760,761,762,763,764,765,767,768],{"file":202,"line":403,"context":404},274,"raw output",{"file":211,"line":406,"context":404},74,{"file":211,"line":408,"context":404},83,{"file":211,"line":410,"context":404},88,{"file":211,"line":107,"context":404},{"file":211,"line":413,"context":404},97,{"file":211,"line":415,"context":404},107,{"file":211,"line":417,"context":404},111,{"file":211,"line":419,"context":404},116,{"file":211,"line":421,"context":404},123,{"file":211,"line":423,"context":404},126,{"file":211,"line":425,"context":404},130,{"file":211,"line":179,"context":404},{"file":211,"line":428,"context":404},143,{"file":211,"line":430,"context":404},144,{"file":211,"line":432,"context":404},150,{"file":211,"line":434,"context":404},151,{"file":211,"line":436,"context":404},157,{"file":211,"line":438,"context":404},158,{"file":211,"line":440,"context":404},164,{"file":211,"line":442,"context":404},165,{"file":211,"line":444,"context":404},172,{"file":211,"line":446,"context":404},188,{"file":211,"line":448,"context":404},213,{"file":211,"line":332,"context":404},{"file":211,"line":332,"context":404},{"file":211,"line":452,"context":404},218,{"file":211,"line":454,"context":404},219,{"file":211,"line":456,"context":404},221,{"file":211,"line":334,"context":404},{"file":211,"line":459,"context":404},224,{"file":211,"line":461,"context":404},225,{"file":211,"line":366,"context":404},{"file":211,"line":464,"context":404},228,{"file":211,"line":466,"context":404},232,{"file":211,"line":468,"context":404},246,{"file":211,"line":470,"context":404},254,{"file":211,"line":472,"context":404},300,{"file":211,"line":474,"context":404},307,{"file":211,"line":476,"context":404},318,{"file":211,"line":478,"context":404},321,{"file":211,"line":480,"context":404},322,{"file":211,"line":482,"context":404},325,{"file":211,"line":484,"context":404},326,{"file":211,"line":486,"context":404},329,{"file":211,"line":488,"context":404},330,{"file":211,"line":490,"context":404},333,{"file":211,"line":492,"context":404},336,{"file":211,"line":494,"context":404},337,{"file":211,"line":496,"context":404},340,{"file":211,"line":498,"context":404},341,{"file":211,"line":500,"context":404},344,{"file":211,"line":502,"context":404},345,{"file":211,"line":504,"context":404},349,{"file":211,"line":506,"context":404},354,{"file":211,"line":508,"context":404},355,{"file":211,"line":510,"context":404},364,{"file":211,"line":512,"context":404},371,{"file":211,"line":514,"context":404},385,{"file":211,"line":516,"context":404},390,{"file":211,"line":518,"context":404},395,{"file":211,"line":520,"context":404},396,{"file":211,"line":522,"context":404},399,{"file":211,"line":524,"context":404},412,{"file":211,"line":526,"context":404},416,{"file":211,"line":528,"context":404},424,{"file":211,"line":530,"context":404},429,{"file":211,"line":532,"context":404},430,{"file":211,"line":534,"context":404},440,{"file":211,"line":536,"context":404},444,{"file":211,"line":538,"context":404},445,{"file":211,"line":308,"context":404},{"file":211,"line":541,"context":404},460,{"file":211,"line":543,"context":404},465,{"file":211,"line":545,"context":404},468,{"file":211,"line":316,"context":404},{"file":211,"line":548,"context":404},520,{"file":301,"line":550,"context":404},82,{"file":301,"line":552,"context":404},89,{"file":301,"line":13,"context":404},{"file":301,"line":107,"context":404},{"file":301,"line":556,"context":404},98,{"file":301,"line":558,"context":404},129,{"file":301,"line":560,"context":404},163,{"file":301,"line":562,"context":404},166,{"file":301,"line":564,"context":404},197,{"file":301,"line":566,"context":404},214,{"file":301,"line":459,"context":404},{"file":301,"line":461,"context":404},{"file":301,"line":366,"context":404},{"file":301,"line":571,"context":404},236,{"file":301,"line":573,"context":404},247,{"file":301,"line":575,"context":404},258,{"file":301,"line":577,"context":404},270,{"file":301,"line":394,"context":404},{"file":301,"line":580,"context":404},280,{"file":301,"line":582,"context":404},282,{"file":301,"line":584,"context":404},284,{"file":301,"line":586,"context":404},290,{"file":301,"line":588,"context":404},299,{"file":301,"line":590,"context":404},304,{"file":301,"line":592,"context":404},310,{"file":301,"line":594,"context":404},312,{"file":301,"line":596,"context":404},316,{"file":301,"line":476,"context":404},{"file":301,"line":599,"context":404},320,{"file":301,"line":601,"context":404},335,{"file":220,"line":354,"context":404},{"file":220,"line":387,"context":404},{"file":220,"line":324,"context":404},{"file":220,"line":415,"context":404},{"file":220,"line":607,"context":404},109,{"file":323,"line":609,"context":404},46,{"file":323,"line":611,"context":404},55,{"file":323,"line":613,"context":404},73,{"file":323,"line":615,"context":404},77,{"file":323,"line":617,"context":404},79,{"file":323,"line":178,"context":404},{"file":323,"line":14,"context":404},{"file":338,"line":621,"context":404},50,{"file":338,"line":623,"context":404},71,{"file":338,"line":625,"context":404},72,{"file":338,"line":615,"context":404},{"file":338,"line":628,"context":404},81,{"file":338,"line":410,"context":404},{"file":338,"line":552,"context":404},{"file":632,"line":633,"context":404},"classes\\Admin\\Admin_Page_Polls.php",33,{"file":341,"line":609,"context":404},{"file":341,"line":390,"context":404},{"file":341,"line":637,"context":404},64,{"file":341,"line":623,"context":404},{"file":341,"line":406,"context":404},{"file":341,"line":255,"context":404},{"file":341,"line":628,"context":404},{"file":341,"line":178,"context":404},{"file":341,"line":345,"context":404},{"file":341,"line":413,"context":404},{"file":341,"line":646,"context":404},103,{"file":341,"line":648,"context":404},112,{"file":341,"line":419,"context":404},{"file":341,"line":651,"context":404},118,{"file":341,"line":653,"context":404},120,{"file":341,"line":655,"context":404},127,{"file":341,"line":558,"context":404},{"file":341,"line":179,"context":404},{"file":341,"line":659,"context":404},138,{"file":341,"line":661,"context":404},145,{"file":341,"line":663,"context":404},147,{"file":341,"line":665,"context":404},154,{"file":341,"line":667,"context":404},156,{"file":341,"line":560,"context":404},{"file":341,"line":442,"context":404},{"file":341,"line":444,"context":404},{"file":341,"line":672,"context":404},174,{"file":341,"line":674,"context":404},181,{"file":341,"line":676,"context":404},183,{"file":341,"line":678,"context":404},186,{"file":341,"line":680,"context":404},196,{"file":341,"line":682,"context":404},202,{"file":341,"line":684,"context":404},208,{"file":341,"line":686,"context":404},210,{"file":341,"line":688,"context":404},216,{"file":341,"line":452,"context":404},{"file":341,"line":459,"context":404},{"file":341,"line":692,"context":404},226,{"file":341,"line":466,"context":404},{"file":341,"line":695,"context":404},233,{"file":341,"line":697,"context":404},235,{"file":341,"line":699,"context":404},256,{"file":341,"line":701,"context":404},257,{"file":341,"line":703,"context":404},262,{"file":341,"line":705,"context":404},268,{"file":341,"line":577,"context":404},{"file":341,"line":708,"context":404},278,{"file":341,"line":580,"context":404},{"file":341,"line":711,"context":404},285,{"file":341,"line":713,"context":404},293,{"file":341,"line":715,"context":404},295,{"file":341,"line":717,"context":404},302,{"file":341,"line":590,"context":404},{"file":341,"line":720,"context":404},311,{"file":341,"line":722,"context":404},313,{"file":341,"line":599,"context":404},{"file":344,"line":725,"context":404},170,{"file":344,"line":488,"context":404},{"file":353,"line":459,"context":404},{"file":353,"line":729,"context":404},242,{"file":353,"line":731,"context":404},243,{"file":353,"line":360,"context":404},{"file":225,"line":611,"context":404},{"file":225,"line":216,"context":404},{"file":244,"line":628,"context":404},{"file":263,"line":216,"context":404},{"file":263,"line":738,"context":404},59,{"file":263,"line":390,"context":404},{"file":263,"line":741,"context":404},65,{"file":263,"line":623,"context":404},{"file":263,"line":255,"context":404},{"file":263,"line":617,"context":404},{"file":263,"line":178,"context":404},{"file":263,"line":747,"context":404},90,{"file":749,"line":27,"context":404},"classes\\Poll_Utils.php",{"file":268,"line":751,"context":404},41,{"file":268,"line":207,"context":404},{"file":268,"line":754,"context":404},43,{"file":268,"line":609,"context":404},{"file":268,"line":298,"context":404},{"file":268,"line":758,"context":404},48,{"file":268,"line":613,"context":404},{"file":268,"line":406,"context":404},{"file":268,"line":615,"context":404},{"file":268,"line":628,"context":404},{"file":268,"line":550,"context":404},{"file":268,"line":178,"context":404},{"file":268,"line":766,"context":404},105,{"file":393,"line":274,"context":404},{"file":393,"line":556,"context":404},[770],{"name":771,"version":38,"knownCves":772},"TinyMCE",[],[774,795,813,823,834,852,863],{"entryPoint":775,"graph":776,"unsanitizedCount":29,"severity":40},"render (classes\\Admin\\Admin_Page_Logs.php:42)",{"nodes":777,"edges":792},[778,782,787,790],{"id":779,"type":780,"label":781,"file":323,"line":253},"n0","source","$_SERVER",{"id":783,"type":784,"label":785,"file":323,"line":613,"wp_function":786},"n1","sink","echo() [XSS]","echo",{"id":788,"type":780,"label":789,"file":323,"line":255},"n2","$_SERVER['REQUEST_URI'] (x2)",{"id":791,"type":784,"label":785,"file":323,"line":255,"wp_function":786},"n3",[793,794],{"from":779,"to":783,"sanitized":278},{"from":788,"to":791,"sanitized":282},{"entryPoint":796,"graph":797,"unsanitizedCount":29,"severity":812},"request_handler (classes\\Admin\\Admin_Page_l10n.php:19)",{"nodes":798,"edges":809},[799,802,805],{"id":779,"type":780,"label":800,"file":220,"line":801},"$_POST['l10n']",29,{"id":783,"type":803,"label":804,"file":220,"line":801},"transform","→ update_l10n()",{"id":788,"type":784,"label":806,"file":220,"line":807,"wp_function":808},"update_option() [Settings Manipulation]",141,"update_option",[810,811],{"from":779,"to":783,"sanitized":278},{"from":783,"to":788,"sanitized":278},"low",{"entryPoint":814,"graph":815,"unsanitizedCount":29,"severity":812},"\u003CAdmin_Page_l10n> (classes\\Admin\\Admin_Page_l10n.php:0)",{"nodes":816,"edges":820},[817,818,819],{"id":779,"type":780,"label":800,"file":220,"line":801},{"id":783,"type":803,"label":804,"file":220,"line":801},{"id":788,"type":784,"label":806,"file":220,"line":807,"wp_function":808},[821,822],{"from":779,"to":783,"sanitized":278},{"from":783,"to":788,"sanitized":278},{"entryPoint":824,"graph":825,"unsanitizedCount":29,"severity":812},"\u003CAdmin_Page_Logs> (classes\\Admin\\Admin_Page_Logs.php:0)",{"nodes":826,"edges":831},[827,828,829,830],{"id":779,"type":780,"label":781,"file":323,"line":253},{"id":783,"type":784,"label":785,"file":323,"line":613,"wp_function":786},{"id":788,"type":780,"label":789,"file":323,"line":255},{"id":791,"type":784,"label":785,"file":323,"line":255,"wp_function":786},[832,833],{"from":779,"to":783,"sanitized":278},{"from":788,"to":791,"sanitized":282},{"entryPoint":835,"graph":836,"unsanitizedCount":294,"severity":54},"\u003CAdmin_Page_Edit_Poll> (classes\\Admin\\Admin_Page_Edit_Poll.php:0)",{"nodes":837,"edges":849},[838,840,844,845],{"id":779,"type":780,"label":839,"file":301,"line":754},"$_POST",{"id":783,"type":784,"label":841,"file":301,"line":842,"wp_function":843},"query() [SQLi]",467,"query",{"id":788,"type":780,"label":839,"file":301,"line":754},{"id":791,"type":784,"label":846,"file":301,"line":847,"wp_function":848},"wp_redirect() [Open Redirect]",548,"wp_redirect",[850,851],{"from":779,"to":783,"sanitized":278},{"from":788,"to":791,"sanitized":278},{"entryPoint":853,"graph":854,"unsanitizedCount":29,"severity":54},"bulk_action_handler (classes\\Admin\\List_Table_Logs.php:41)",{"nodes":855,"edges":860},[856,857,859],{"id":779,"type":780,"label":839,"file":344,"line":741},{"id":783,"type":803,"label":858,"file":344,"line":741},"→ del_logs_and_votes()",{"id":788,"type":784,"label":841,"file":323,"line":330,"wp_function":843},[861,862],{"from":779,"to":783,"sanitized":278},{"from":783,"to":788,"sanitized":278},{"entryPoint":864,"graph":865,"unsanitizedCount":29,"severity":54},"\u003CList_Table_Logs> (classes\\Admin\\List_Table_Logs.php:0)",{"nodes":866,"edges":870},[867,868,869],{"id":779,"type":780,"label":839,"file":344,"line":741},{"id":783,"type":803,"label":858,"file":344,"line":741},{"id":788,"type":784,"label":841,"file":323,"line":330,"wp_function":843},[871,872],{"from":779,"to":783,"sanitized":278},{"from":783,"to":788,"sanitized":278},{"summary":874,"deductions":875},"The democracy-poll plugin v6.1.1 presents a mixed security posture. While it demonstrates some good practices, such as the use of nonces and capability checks in some areas and a moderate percentage of SQL queries using prepared statements, significant concerns remain.  The presence of two AJAX handlers without authorization checks creates a direct attack vector for unauthenticated users.  The taint analysis revealing three high-severity flows with unsanitized paths is particularly worrying, suggesting potential for code injection or data leakage if these flows are exploitable.\n\nThe plugin's vulnerability history is a strong indicator of ongoing security issues, with three known CVEs, one of which is currently unpatched. The common types of vulnerabilities (Missing Authorization, CSRF, XSS) align with the findings in the static analysis, particularly the unauthenticated AJAX handlers and the taint analysis results. The recency of the last vulnerability (April 2024) suggests that these issues may not be historical and could still be present or easily reintroduced.  While the plugin has some strengths, the combination of unprotected entry points, critical taint flows, and a history of unpatched vulnerabilities necessitates a cautious approach.",[876,878,880,883,885,888],{"reason":877,"points":140},"Unprotected AJAX handlers",{"reason":879,"points":280},"High severity unsanitized taint flows",{"reason":881,"points":882},"Unpatched high severity CVE",18,{"reason":884,"points":78},"SQL queries using prepared statements \u003C 75%",{"reason":886,"points":887},"Output escaping \u003C 50%",8,{"reason":889,"points":140},"Vulnerability history: 3 known CVEs","2026-03-16T17:58:58.433Z",{"wat":892,"direct":903},{"assetPaths":893,"generatorPatterns":897,"scriptPaths":898,"versionParams":899},[894,895,896],"\u002Fwp-content\u002Fplugins\u002Fdemocracy-poll\u002Fadmin\u002Fcss\u002Fjquery-ui.css","\u002Fwp-content\u002Fplugins\u002Fdemocracy-poll\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fdemocracy-poll\u002Fadmin\u002Fcss\u002Fadmin.css",[],[895],[900,901,902],"democracy-poll\u002Fadmin\u002Fcss\u002Fjquery-ui.css?ver=","democracy-poll\u002Fjs\u002Fadmin.js?ver=","democracy-poll\u002Fadmin\u002Fcss\u002Fadmin.css?ver=",{"cssClasses":904,"htmlComments":906,"htmlAttributes":907,"restEndpoints":911,"jsGlobals":912,"shortcodeOutput":915},[905],"democracy-poll-wrap",[],[908,909,910],"data-democr-poll-id","data-democr-answer-id","data-democr-admin-ajaxurl",[],[913,914],"DemocracyPoll","democracy_poll_admin_ajax",[916,917,918],"\u003Cdiv class=\"democr-poll-results-count\">","\u003Cdiv class=\"democr-poll-answer-wrap\">","\u003Cdiv class=\"democr-poll-wrap\">"]