Automattic · Report #1711318
Archived / Deleted / Private Poll Can Be Viewed by Another Users [Crowdsignal WordPress plugins]
Validstatus
lowseverity
9upvotes
3 Nov 2022disclosed
Summary
This issue was reported by @apapedulimu in CrowdSignal.
The private or deleted polls on https://app.crowdsignal.com (questions/answers, not results) could be viewed by other users through the editor in the CrowdSignal plugin.
Happy to learn and work with the Automattic team!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.