What’s Vulnerable › Products

YOP Poll vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your YOP Poll version is affected

Latest YOP Poll vulnerabilities

• CVE-2026-85682 — YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route (CVSS 8.8)
• CVE-2026-14840 — YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing (CVSS 5.3)
• CVE-2025-64370 — WordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-62040 — WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-46611 — WordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control Vulnerability (CVSS 5.3)
• CVE-2023-6109 — YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation (CVSS 3.7)
• CVE-2022-1600 — YOP Poll < 6.4.3 - IP Spoofing (CVSS 5.3)
• CVE-2021-24834 — YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module (CVSS 5.4)
• CVE-2021-24833 — YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module (CVSS 5.4)
• CVE-2021-24454 — YOP Poll < 6.2.8 - Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2017-2127 — (CVSS 5.4)