Skip to content
PluginCanary

YOP Poll

by YOP · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 28 Oct 2026, 22 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for YOP Poll
Ownership100
Maintenance100
Security70
SupportNo data
Reputation70

How the score works

Quick answers

Is YOP Poll still maintained?
Yes. Last release 28 Oct 2026, 22 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns YOP Poll, and has it changed hands?
No change recorded. Main committer yourownprogrammer since Nov 2012. 4 Nov 2026 · SVN log
Was YOP Poll removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is YOP Poll safe?
16 known vulnerabilities, all fixed (latest in 7.0.11). Not on the exploited list. 23 Sep 2026 · Wordfence Intelligence
Is the latest YOP Poll update safe to install?
No ownership change before 7.1.0. No one-star spike after it. 28 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
yourownprogrammer14 Nov 2012 to 28 Oct 2026, 348 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
7 days ago
Releases, 24 months
22
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for YOP Poll
Q1 20241
Q2 20240
Q3 20244
Q4 20242
Q1 20252
Q2 20250
Q3 20250
Q4 20252
Q1 20261
Q2 20265
Q3 20267
Q4 20263

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.0 (3 reviews). Lifetime: 4.4.

Average rating per quarter for YOP Poll
Q4 20232.0
Q1 20242.5
Q1 20255.0
Q4 20255.0
Q2 20265.0
Q3 20264.0

Average rating rose from 2.0 to 4.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star356
4 star27
3 star8
2 star11
1 star50
Latest low reviews

Security record

4 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 7.0.11).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
23 Sep 2026YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route8.8<= 7.0.107.0.11Patched before disclosure
6 Aug 2026YOP Poll 7.0.0-7.0.5 - IP Spoofing to Vote Restriction Bypass5.37.0.0 to 7.0.57.0.6Patched before disclosure
2 Nov 2025YOP Poll <= 6.5.38 - Missing Authorization5.3<= 6.5.386.5.391
12 Oct 2025YOP Poll <= 6.5.37 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.5.376.5.38Patched before disclosure
13 Nov 2023YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation5.3<= 6.5.266.5.27Patched before disclosure
24 Oct 2023YOP Poll <= 6.5.28 - Reusable Captcha via validateImage5.3<= 6.5.286.5.29148
11 Jul 2022YOP Poll <= 6.4.2 - IP Spoofing via X-Forwarded-For header5.3<= 6.4.26.4.32
14 Feb 2022YOP Poll <= 6.3.4 - Author+ Stored Cross-Site Scripting6.4<= 6.3.46.3.5Patched before disclosure
15 Oct 2021YOP Poll <= 6.3.0 - Author+ Stored Cross-Site Scripting via Options Module5.4<= 6.3.06.3.141
15 Oct 2021YOP Poll <= 6.3.0 - Author+ Stored Cross-Site Scripting via Preview Module5.4<= 6.3.06.3.141
17 Jun 2021YOP Poll <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting6.1<= 6.2.76.2.811
24 Apr 2020YOP Poll <= 6.1.4 - Authenticated Stored Cross-Site Scripting6.4< 6.1.56.1.526
15 Jan 2020YOP Poll <= 6.1.1 - Reflected Cross-Site Scripting6.1< 6.1.26.1.256
5 Feb 2019YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter6.1< 6.0.36.0.334
23 Mar 2017YOP Poll <= 5.8.0 - Reflected Cross-Site Scripting6.1< 5.8.15.8.1n/a
8 Jul 2015YOP Poll <= 5.7.3 - Reflected Cross-Site Scripting6.1<= 5.7.35.7.44

Changelog mentions of security fixes: 7.0.6 (security); 7.0.11 (security, vulnerability, sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 4 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for YOP Poll
4 May 20266,486
11 May 20266,436
18 May 20266,717
25 May 20261,373
1 Jun 20265,957
8 Jun 20261,377
15 Jun 20266,009
22 Jun 20261,043
29 Jun 2026861
6 Jul 20261,026
13 Jul 20265,770
20 Jul 20266,393
27 Jul 20264,600
3 Aug 20261,360
10 Aug 20266,245
17 Aug 20261,090
24 Aug 2026987
31 Aug 20266,036
7 Sep 20265,554
14 Sep 20261,958
21 Sep 20267,127
28 Sep 20261,307
5 Oct 20266,705
12 Oct 20261,161
19 Oct 20261,501
26 Oct 20266,492
2 Nov 2026356

Weekly downloads over the last 4 weeks are 37% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Crowdsignal DashboardScore 96 · 200,000+WP-PollsScore 96 · 40,000+Crowdsignal FormsScore 95 · 200,000+UserFeedbackScore 90 · 200,000+Interactive ContentScore 88 · 40,000+

Facts

Version7.1.0
AuthorYOP
Added14 Nov 2012
Last updated28 Oct 2026
Active installs10,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryForms & Data Collection > Survey & Poll Tools
Tagspoll, voting, create poll, poll plugin, WordPress poll

Questions

Is YOP Poll still maintained?

Yes. Last release 28 Oct 2026, 22 releases in the last 24 months.

Who owns YOP Poll, and has it changed hands?

No change recorded. Main committer yourownprogrammer since Nov 2012.

Was YOP Poll removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is YOP Poll safe?

16 known vulnerabilities, all fixed (latest in 7.0.11). Not on the exploited list.

Is the latest YOP Poll update safe to install?

No ownership change before 7.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue