YP
Product
Yop Poll
9
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 8Low 1
Watch
Add Yop Poll to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24885 | 6.1 | Oct 25 | The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting Affected: before 6.1.2 |
| CVE-2021-24454 | 6.1 | Jul 12 | In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", "Display other answers in the result list" and "Show results", it can… Affected: before 6.2.8 |
| CVE-2019-9914 | 6.1 | Mar 21 | The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS Affected: before 6.0.3 |
| CVE-2022-0205 | 5.4 | Mar 7 | The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before outputting them, leading to a… Affected: before 6.3.5 |
| CVE-2021-24834 | 5.4 | Nov 17 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as… Affected: before 6.3.1 |
| CVE-2021-24833 | 5.4 | Nov 17 | The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as… Affected: before 6.3.1 |
| CVE-2017-2127 | 5.4 | Apr 28 | Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 5.8 |
| CVE-2022-1600 | 5.3 | Aug 1 | YOP Poll < 6.4.3 - IP Spoofing Affected: before 6.4.3 |
Showing 8