Skip to contentYop Poll vulnerabilities
- yop poll, yourownprogrammer yop poll +1 moreYOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST RouteCVE-2026-856828.8 High
- unknown yop poll, yop poll +1 moreYOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header SpoofingCVE-2026-14840Public exploit5.3 Medium
- yop pollWordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerabilityCVE-2025-643705.3 Medium
- yop pollWordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620407.1 High
- yop poll, yourownprogrammer yop poll +1 moreWordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control VulnerabilityCVE-2023-466115.3 Medium
- yop poll, yop-poll yop poll +1 moreYOP Poll <= 6.5.26 - Race Condition to Vote ManipulationCVE-2023-61095.3 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.4.3 - IP SpoofingCVE-2022-16005.3 Medium
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.3.5 - Author+ Stored Cross-Site ScriptingCVE-2022-02055.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options ModuleCVE-2021-248345.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview ModuleCVE-2021-248335.4 Medium
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.1.2 - Reflected Cross-Site ScriptingCVE-2021-248856.1 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.2.8 - Stored Cross-Site ScriptingCVE-2021-244546.1 Medium
- yop poll, yop-poll yop poll +1 moreCross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to...CVE-2017-21275.4 Medium