CVE-2022-1581

Publication date

2022-11-21 00:00:00

Family

WPScan

State

PUBLISHED

Description

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitors IP from certain HTTP headers over PHPs REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.