CPE

Cpe:2.3:a:yop-Poll:yop_poll:::*:::wordpress::

1 brief RSS

Account Takeover via Origin Validation Error in YOP Poll WordPress Plugin

The YOP Poll plugin for WordPress, in versions up to 7.0.10, exposes REST nonces via postMessage to window.opener, enabling attackers to perform unauthorized administrative actions including account takeover.

exploited YOP Poll wordpress plugin account-takeover vulnerability

2t 1c 1h ago

Cpe:2.3:a:yop-Poll:yop_poll:*:*:*:*:*:wordpress:*:*

Account Takeover via Origin Validation Error in YOP Poll WordPress Plugin

Cpe:2.3:a:yop-Poll:yop_poll:::*:::wordpress::