TI-2023-05615 CVE-2023-6109 · GHSA-pgj2-fwxq-v5vr
YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
Priority LOW 24
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26.
Vulnerabilities
6 records
TI-2022-01470 CVE-2022-1600 · GHSA-5q68-9mm8-q9vm
YOP Poll < 6.4.3 - IP Spoofing
Priority LOW 25
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
TI-2021-07116 CVE-2021-24834 · GHSA-4rg7-7m6h-7jqr
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
Priority LOW 28
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbit…
TI-2021-07115 CVE-2021-24833 · GHSA-ggxf-x772-3hfw
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
Priority LOW 27
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary sc…
TI-2021-06743 CVE-2021-24454 · GHSA-whff-r7hf-mx5w
YOP Poll < 6.2.8 - Stored Cross-Site Scripting
Priority LOW 30
In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and "Show results", it can lead to Stored Cross-Site Scripting issu…
TI-2017-01431 CVE-2017-2127 · GHSA-94gp-xpxx-7fc2
Cross-site scripting in YOP Poll
Priority LOW 26
Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.