YOP

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

YOP records in CISA KEV

No YOP vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-38363 CVE-2025-62040 · GHSA-xhf8-58fx-m7x8

WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through <= 6.5.37.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.003 Published 2025-11-06 No fix listed CWE-79

TI-2025-39803 CVE-2025-64370 · GHSA-rwj7-xhqg-v5wr

WordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YOP Poll: from n/a through <= 6.5.38.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00231 Published 2025-11-13 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0