| CVE-2026-14840 |
The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts…
|
5.3
Moyenne
|
1 août 2026 |
| CVE-2022-1600 |
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's…
|
Non notée
|
1 août 2022 |
| CVE-2022-0205 |
The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with…
|
Non notée
|
7 mars 2022 |
| CVE-2021-24834 |
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in…
|
Non notée
|
17 nov. 2021 |
| CVE-2021-24833 |
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in…
|
Non notée
|
17 nov. 2021 |
| CVE-2021-24885 |
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an…
|
Non notée
|
25 oct. 2021 |
| CVE-2021-24454 |
In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display…
|
Non notée
|
12 juil. 2021 |