Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-1581

WP-Polls < 2.76.0 - IP Validation Bypass

Description

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP-Polls

Default version status: unaffected

  • 0 to < 2.76.0affected

References