Race Condition Vulnerability in YOP Poll Plugin for WordPress

CVE-2023-6109

What is CVE-2023-6109?

The YOP Poll plugin for WordPress is susceptible to a race condition, allowing unauthenticated attackers to exploit improper restrictions in the add() function. This vulnerability enables attackers to cast multiple votes in a single poll, even when it is configured to limit voting to one vote per individual. This could lead to skewed results and undermine the integrity of polling data. Website administrators should update to secure versions and apply necessary security practices to mitigate the risk of exploitation.

References