CVE-2022-1581: Wp-Polls Project Wp-Polls

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

Affected products

• Wp-Polls Project Wp-Polls: before 2.76.0 (fixed in 2.76.0)

Published 2022-11-21. Last modified 2026-06-17.