CVE-2026-14840

CVE-2026-14840 concerns the YOP Poll WordPress plugin (before 7.0.6). The vulnerability arises because the plugin does not validate the connection’s origin IP and trusts client-controlled forwarding headers when enforcing per-IP vote limits, enabling unauthenticated attackers to bypass the vote r...

CVE-2022-1581

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

CVE-2022-1581

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

PT-2022-13980 · WordPress · Wp-Polls

Name of the Vulnerable Software and Affected Versions: WP-Polls versions prior to 2.76.0 Description: The issue allows bypassing IP-based limitations to vote in certain situations due to the plugin prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR...

CVE-2022-1600

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link:...