5.3
Medium
CVE-2022-1581 The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's…
Description
The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP-Polls 2.76 | earliest → < 2.76.0 | 2.76.0 |