YO
Vendor
Yop-poll
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-6109 | YP Yop Poll Yop-poll | 3.7 | Nov 14 | The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26 |
| CVE-2022-1600 | YP Yop Poll Yop-poll | 5.3 | Aug 1 | YOP Poll < 6.4.3 - IP Spoofing |
| CVE-2022-0205 | YO Yop-poll Yop-poll | 5.4 | Mar 7 | The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before outputting them, leading to a… |
| CVE-2021-24834 | YP Yop Poll Yop-poll | 5.4 | Nov 17 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as… |
| CVE-2021-24833 | YP Yop Poll Yop-poll | 5.4 | Nov 17 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as… |
| CVE-2021-24885 | YO Yop-poll Yop-poll | 6.1 | Oct 25 | The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting |
| CVE-2021-24454 | YP Yop Poll Yop-poll | 6.1 | Jul 12 | In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and "Show results", it can… |
| CVE-2019-9914 | YO Yop-poll Yop-poll | 6.1 | Mar 21 | The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS |
| CVE-2017-2127 | YP Yop Poll Yop-poll | 5.4 | Apr 28 | Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |