YOP Poll

Go to YOP Poll → Add New in your WordPress admin. Fill in the question and answers, choose your start and end dates, and adjust the settings for results, vote permissions, and display however you like. Click Save and your poll is ready to use.

Every poll has a shortcode you can copy and paste anywhere on your site — pages, posts, widgets, or template files. You'll find the shortcode for each poll on the All Polls page, in the dedicated shortcode column.

Yes. You can use these built-in shortcodes anywhere on your site:

• [yop_poll id="-1"] — displays the current active poll
• [yop_poll id="-2"] — displays the most recent poll
• [yop_poll id="-3"] — displays a random active poll
• [yop_poll_archive max=0 sort="date_added|num_votes" sortdir="asc|desc"] — displays a full archive of polls

Yes. YOP Poll has no limit on the number of polls you can run simultaneously. You can also schedule polls to start and end on specific dates, so you can queue up campaigns to run one after another.

Yes. When creating or editing a poll, add Custom Field elements to ask voters for things like name, email, age, or anything else you need. You can export this data from the votes page later.

On the All Polls page, each poll has a View Results option that shows the full results — vote counts, percentages, and any custom field responses collected from voters. The Logs option is separate: it records every voting attempt on your site (successful or not), which is useful for auditing, troubleshooting, or investigating suspicious activity. It's not where you go to see poll results.

Edit the poll, find the View Results setting, choose After Poll End Date, and save. Voters will see only the question until the poll closes.

No — each poll has a single question. If you need multiple questions, create a separate poll for each one.

Yes. Version 7.0 is a complete rewrite, but it's a drop-in upgrade. All your polls, votes, templates, custom fields, and settings migrate automatically the first time you activate the new version. Your existing shortcodes will continue to work without any changes.

Version 7.0.11 changed how a vote from a signed-in visitor reaches your site. It now goes through WordPress's own admin-ajax.php, rather than through the WordPress REST API, so that no account-wide security token has to be placed on the page. Voting as a guest is unchanged. A few security plugins and hosting firewall rules restrict admin-ajax.php, usually as a measure against brute-force or scraping traffic. On those sites, signed-in voting will stop working after the update while guest voting carries on normally — which is the symptom to look for. Allowing admin-ajax.php resolves it. The two actions the plugin uses are named yop_poll_vote and yop_poll_results, and both are refused outright for visitors who are not signed in.

Please report security issues through the Patchstack Vulnerability Disclosure Program. The Patchstack team will help with verification, CVE assignment, and notifying us of the issue.