← All advisories

Medium severity6.1NVD Advisory· Published Mar 22, 2019· Updated Jun 17, 2026

CVE-2019-9914

CVE-2019-9914

Description

The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Yop Pollinferred2 versions
<6.0.3+ 1 more
- (no CPE)range: <6.0.3
- (no CPE)range: <6.0.3
Package: https://wordpress.org/plugins/yop-poll
Yop Poll/Yop Poll
cpe:2.3:a:yop-poll:yop-poll:*:*:*:*:*:wordpress:*:*
Range: <6.0.3

Patches

Vulnerability mechanics

References

3

seclists.org/fulldisclosure/2019/Mar/43nvdExploitThird Party Advisory
lists.openwall.net/full-disclosure/2019/02/05/15nvdExploitMailing ListThird Party Advisory
security-consulting.icu/blog/2019/02/wordpress-yop-poll-xss/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.