Description
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | YOP Poll | 6.4.3 – < 6.4.3 | 6.4.3 |