Unrated severityNVD Advisory· Published Aug 1, 2022· Updated Aug 3, 2024

YOP Poll < 6.4.3 - IP Spoofing

CVE-2022-1600

Description

The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

YOP Poll/YOP Poll WordPress plugindescription
WordPress/Yop Pollllm-fuzzy
Range: <6.4.3
Package: https://wordpress.org/plugins/yop-poll

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/2b7445fd-0992-47cd-9a48-f5f18d8171f7mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000