| CVE-2026-14840 |
The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts…
|
5.3
Medium
|
Aug 1, 2026 |
| CVE-2022-1600 |
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's…
|
Not rated
|
Aug 1, 2022 |
| CVE-2022-0205 |
The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with…
|
Not rated
|
Mar 7, 2022 |
| CVE-2021-24834 |
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in…
|
Not rated
|
Nov 17, 2021 |
| CVE-2021-24833 |
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in…
|
Not rated
|
Nov 17, 2021 |
| CVE-2021-24885 |
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an…
|
Not rated
|
Oct 25, 2021 |
| CVE-2021-24454 |
In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display…
|
Not rated
|
Jul 12, 2021 |