5.3
Moyenne
CVE-2022-1581 The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's…
Description
The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP-Polls 2.76 | premières → < 2.76.0 | 2.76.0 |