Skip to content
Yop vulnerabilities
Newest
-
yop poll, yourownprogrammer yop poll +1 more
YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route
CVE-2026-85682
8.8 High
-
unknown yop poll, yop poll +1 more
YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing
CVE-2026-14840
Public exploit
5.3 Medium
-
yop poll
WordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerability
CVE-2025-64370
5.3 Medium
-
yop poll
WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62040
7.1 High
-
yop poll, yourownprogrammer yop poll +1 more
WordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control Vulnerability
CVE-2023-46611
5.3 Medium
-
yop poll, yop-poll yop poll +1 more
YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
CVE-2023-6109
5.3 Medium
-
unknown yop poll, yop poll +1 more
YOP Poll < 6.4.3 - IP Spoofing
CVE-2022-1600
5.3 Medium
-
unknown yop poll, yop poll, yop-poll +2 more
YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
CVE-2022-0205
5.4 Medium
-
unknown yop poll, yop poll +1 more
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
CVE-2021-24834
5.4 Medium
-
unknown yop poll, yop poll +1 more
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
CVE-2021-24833
5.4 Medium
-
unknown yop poll, yop poll, yop-poll +2 more
YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
CVE-2021-24885
6.1 Medium
-
unknown yop poll, yop poll +1 more
YOP Poll < 6.2.8 - Stored Cross-Site Scripting
CVE-2021-24454
6.1 Medium
-
yop poll, yop-poll yop poll +1 more
Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to...
CVE-2017-2127
5.4 Medium