Lucene search

K
wpvulndbDaniel RufWPVDB-ID:C1896AB9-9585-40E2-ABBF-EF5153B3C6B2
HistoryOct 31, 2022 - 12:00 a.m.

WP-Polls < 2.76.0 - IP Validation Bypass

2022-10-3100:00:00
Daniel Ruf
wpscan.com
8
wp-polls
plugin
ip validation

0.001 Low

EPSS

Percentile

30.4%

The plugin prioritizes getting a visitor’s IP from certain HTTP headers over PHP’s REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

CPENameOperatorVersion
wp-pollslt2.76.0

0.001 Low

EPSS

Percentile

30.4%

Related for WPVDB-ID:C1896AB9-9585-40E2-ABBF-EF5153B3C6B2