CVE-2026-14840 - Vulnerability Details - OpenCVE

The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Wordpress	Wordpress
Yop-poll	Yop-poll

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/fc810ca2-3f27-414d-b94a-68842925b7c6/

History

Wed, 05 Aug 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-290
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 03 Aug 2026 10:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20 CWE-284

Sat, 01 Aug 2026 08:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Wordpress Wordpress wordpress Yop-poll Yop-poll yop-poll
Vendors & Products		Wordpress Wordpress wordpress Yop-poll Yop-poll yop-poll

Sat, 01 Aug 2026 06:45:00 +0000

Type	Values Removed	Values Added
Description		The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll.
Title		YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing
References		https://wpscan.com/vulnerability/fc810ca2-3f27-414d-b94a-68842925b7c6/

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2026-08-01T06:00:14.327Z

Updated: 2026-08-05T16:18:26.397Z

Reserved: 2026-07-06T11:12:23.785Z

Link: CVE-2026-14840

Vulnrichment

Updated: 2026-08-05T15:13:59.476Z

NVD

Status : Deferred

Published: 2026-08-01T07:16:31.060

Modified: 2026-08-26T16:31:36.750

Link: CVE-2026-14840

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-14840", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-07-06T11:12:23.785Z", "datePublished": "2026-08-01T06:00:14.327Z", "dateUpdated": "2026-08-05T16:18:26.397Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-08-01T06:00:14.327Z"}, "title": "YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing", "problemTypes": [{"descriptions": [{"description": "CWE-290 Authentication Bypass by Spoofing", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "YOP Poll", "versions": [{"status": "affected", "versionType": "semver", "version": "7.0.0", "lessThan": "7.0.6"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll."}], "references": [{"url": "https://wpscan.com/vulnerability/fc810ca2-3f27-414d-b94a-68842925b7c6/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Melina Lentini (M3l3n)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-290", "lang": "en", "description": "CWE-290 Authentication Bypass by Spoofing"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-08-05T15:13:42.428642Z", "id": "CVE-2026-14840", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T16:18:26.397Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-14840", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T15:13:42.428642Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-290", "description": "CWE-290 Authentication Bypass by Spoofing"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T15:13:59.476Z"}}], "cna": {"title": "YOP Poll < 7.0.6 - Unauthenticated Vote Restriction Bypass via IP Header Spoofing", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Melina Lentini (M3l3n)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "YOP Poll", "versions": [{"status": "affected", "version": "7.0.0", "lessThan": "7.0.6", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/fc810ca2-3f27-414d-b94a-68842925b7c6/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-290 Authentication Bypass by Spoofing"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-08-01T06:00:14.327Z"}}}, "cveMetadata": {"cveId": "CVE-2026-14840", "state": "PUBLISHED", "dateUpdated": "2026-08-05T16:18:26.397Z", "dateReserved": "2026-07-06T11:12:23.785Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-08-01T06:00:14.327Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}