WordPress YOP Poll plugin 7.0.0-7.0.6 - Unauthenticated Vote Restriction Bypass vulnerability

Unauthenticated Vote Restriction Bypass vulnerability discovered by Melina Lentini M3l3n in WordPress Plugin YOP Poll versions 7.0.0-7.0.6...

CVE-2026-14840

The YOP Poll WordPress plugin (versions 7.0.0-7.0.6 ) is vulnerable to an unauthenticated vote restriction bypass. The plugin fails to validate the connection's origin IP address, instead trusting client-controlled forwarding headers such as HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR. This allows an...

CVE-2022-1581

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

CVE-2022-1581

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

PT-2022-13980 · WordPress · Wp-Polls

Name of the Vulnerable Software and Affected Versions: WP-Polls versions prior to 2.76.0 Description: The issue allows bypassing IP-based limitations to vote in certain situations due to the plugin prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR...

CVE-2022-1600

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...