Description (CNA)
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / YOP Poll | affected 6.4.3 before 6.4.3 |
CWE
CWE-639
References
ADP enrichment
No English description supplied.