Browse CVEs

MEDIUM 5.3 CVE-2022-1600 The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possib… Yop Poll 6.4.3+ Fix from $1,6002022-08-01 MEDIUM 5.4 CVE-2022-0205 The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before… Yop Poll 6.3.5+ Fix from $1,6002022-03-07 MEDIUM 5.4 CVE-2021-24833 The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where… Yop Poll 6.3.1+ Fix from $1,6002021-11-17 MEDIUM 5.4 CVE-2021-24834 The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options modul… Yop Poll 6.3.1+ Fix from $1,6002021-11-17 MEDIUM 6.1 CVE-2021-24885 The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cr… Yop Poll 6.1.2+ Fix from $1,6002021-10-25 MEDIUM 6.1 CVE-2021-24454 In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result li… Yop Poll 6.2.8+ Fix from $1,6002021-07-12 MEDIUM 6.1 CVE-2019-9914 The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS. Yop Poll 6.0.3+ Fix from $1,6002019-03-22 MEDIUM 5.4 CVE-2017-2127 Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified… Yop Poll after 5.8 Fix from $1,6002017-04-28