## https://sploitus.com/exploit?id=A6AED001-8EBE-595F-9B5C-C2740762F56F
# CVE-2026-14840 — YOP Poll Vote recorded successfully.
#2 403 -> You have already voted on this poll.
#3 403 -> You have already voted on this poll.
```
**Different IP on every request via `X-Forwarded-For` — bypass works:**
```text
#1 201 -> Vote recorded successfully.
#2 201 -> Vote recorded successfully.
#3 201 -> Vote recorded successfully.
```
The `wp_yoppoll_votes` table grows by one row per spoofed IP, confirming the
per-IP limit is bypassed.
## Why the plugin is not included
This repo contains only the PoC and lab orchestration files. The YOP Poll
plugin is GPL-2.0+, but distributing a full copy is unnecessary, bloats the
repo, and can cause issues. Download version 7.0.5 from WordPress.org for your
own lab.
## Disclaimer
This tool is for **authorized security testing and research only**. Do not use
it against systems you do not own or do not have explicit permission to test.
The author is not responsible for misuse or damage caused by this code.