An issue exists in MediaWiki up to and including 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,
mediawiki mediawiki