PT-2026-67052

Name of the Vulnerable Software and Affected Versions YOP Poll WordPress plugin versions prior to 7.0.6 Description The plugin fails to validate the origin IP address of a connection and relies on client-controlled forwarding headers to enforce per-IP vote restrictions. This allows unauthenticate...

CVE-2022-2877

The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat actors to bypass it's block feature by spoofing the headers...