Medium severity5.3NVD Advisory· Published Aug 1, 2022· Updated Jun 17, 2026

CVE-2022-1600

Description

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yop Poll/Yop Poll
cpe:2.3:a:yop-poll:yop_poll:*:*:*:*:*:wordpress:*:*
Range: <6.4.3
YOP Poll/YOP Poll WordPress plugindescription
WordPress/Yop Pollllm-fuzzy
Range: <6.4.3
Package: https://wordpress.org/plugins/yop-poll

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/2b7445fd-0992-47cd-9a48-f5f18d8171f7nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000