Vulnerability in Yop Poll

CVE-2026-14840

The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypas…

Affected products

  • Unknown Yop Poll — versions 7.0.0

References