Skip to content
Threat Feed
Subscribe

Product

YOP Poll (<= 7.0.10)

1 brief RSS
medium threat

Account Takeover via Origin Validation Error in YOP Poll WordPress Plugin

The YOP Poll plugin for WordPress, in versions up to 7.0.10, exposes REST nonces via postMessage to window.opener, enabling attackers to perform unauthorized administrative actions including account takeover.

exploited YOP Poll wordpress plugin account-takeover vulnerability
2t 1c