CVE-2022-1600: Yop-Poll Yop Poll

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

Affected products

• Yop-Poll Yop Poll: before 6.4.3 (fixed in 6.4.3)

Published 2022-08-01. Last modified 2026-06-17.