Approved changes feed: RSS · Atom
cpe:2.3:a:yop-poll:yop-poll:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Yop Poll (acda2d51-4b24-50eb-b18c-dc056ff7af71) |
|---|---|
| Product | Yop Poll (1d1f31ff-d9df-5014-889d-6b8836497a51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0205 |
vulnerable | 2026-06-08 05:39:09.482523 |
YOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting
The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as author) before outputting them, leading to a Stored Cross-Site Scripting issue
Published: 2022-03-07T08:16:23.000Z
Updated: 2024-08-02T23:18:42.555Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24885 |
vulnerable | 2026-06-08 05:30:39.559361 |
YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
Published: 2021-10-25T13:21:01.000Z
Updated: 2024-08-03T19:49:12.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9914 |
vulnerable | 2026-06-08 05:14:26.416275 |
Details available
The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS.
Published: 2019-03-21T23:03:15.000Z
Updated: 2024-08-04T22:01:55.130Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.