CVE-2023-6109mediumCWE-362

CVE-2023-6109: falha de média gravidade em yourownprogrammer YOP Poll

YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar YOP Poll

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.4%
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add() function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to one vote per person.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
yourownprogrammer · YOP Poll
CVEs relacionadas — yourownprogrammer YOP Poll

No mesmo produto, das mais perigosas para as menos.

CVE-2023-46611MEDIUMWordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control VulnerabilityEPSS 0.5%CVE-2026-85682HIGHYOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST RouteEPSS 0.1%