Yop Poll (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-01. Vendor: Unknown.

CVEs of Yop Poll

• CVE-2026-14840 - CVSS 5.3 (medium), 2026-08-01: The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when…
• CVE-2022-1600 - CVSS 5.3 (medium), 2022-08-01: The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to…
• CVE-2022-0205 - CVSS 5.4 (medium), 2022-03-07: The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before…
• CVE-2021-24833 - CVSS 5.4 (medium), 2021-11-17: The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user…
• CVE-2021-24834 - CVSS 5.4 (medium), 2021-11-17: The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a…
• CVE-2021-24885 - CVSS 6.1 (medium), 2021-10-25: The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site…
• CVE-2021-24454 - CVSS 6.1 (medium), 2021-07-12: In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and…