Skip to contentAys Pro vulnerabilities
Newest
- ays pro faq builder aysWordPress FAQ Builder AYS Plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-247225.9 Medium
- ays pro poll makerWordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerabilityCVE-2024-562775.3 Medium
- ays pro poll makerWordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerabilityCVE-2024-562956.5 Medium
- ays pro poll makerWordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerabilityCVE-2023-457665.3 Medium
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerabilityCVE-2023-226975.3 Medium
- ays pro poll maker, poll maker team maker +1 moreWordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerabilityCVE-2023-509045.3 Medium
- ays pro faq builder aysFAQ Builder AYS <= 1.7.1 - Reflected Cross-Site ScriptingCVE-2024-114586.1 Medium
- ays pro survey makerWordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-504265.9 Medium
- ays pro survey makerSurvey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-84884.4 Medium
- ays pro secure copy content protection and content lockingWordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473067.1 High
- ays pro chartifyWordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-473477.1 High
- ays pro photo gallery by ays, ays-pro photo gallery, photo gallery team gallery by ays +2 moreWordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerabilityCVE-2024-374423.8 Low
- ays pro quiz makerQuiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' ParameterCVE-2024-6028Public exploitEPSS 11.8%9.8 Critical
- ays pro survey makerSurvey Maker < 4.2.9 - Admin+ Stored XSS via Plugin SettingsCVE-2024-40614.8 Medium
- ays pro quiz maker, quiz maker team maker +1 moreWordPress Quiz Maker plugin <= 6.3.9.4 - Content SpoofingCVE-2023-239853.7 Low
- ays pro popup like box, popup likebox team like box +1 moreWordPress Popup Likebox plugin <= 3.7.2 - Cross-Site Scripting (XSS) vulnerabilityCVE-2024-313875.9 Medium
- ays pro survey makerInsufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a...CVE-2023-357645.3 Medium
- ays pro survey makerSurvey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this...CVE-2023-344236.1 Medium
- ays pro photo gallery by ays, photo gallery team gallery by ays +1 moreWordPress Photo Gallery by Ays Plugin <=5.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-299197.1 High
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-299187.1 High
- ays pro survey maker, survey maker team maker +1 moreWordPress Survey Maker plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-279965.9 Medium
- ays pro quiz makerQuiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data RetrievalCVE-2024-10795.3 Medium
- ays pro quiz makerQuiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & ModificationCVE-2024-10784.3 Medium
- ays pro quiz makerQuiz Maker < 6.4.9.5 - Unauthenticated Email Address DisclosureCVE-2023-61555.3 Medium
- ays pro quiz makerQuiz Maker < 6.4.9.5 - Reflected Cross-Site ScriptingCVE-2023-61666.1 Medium
- ays pro poll maker, poll maker team maker +1 moreWordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-418717.1 High
- ays pro easy form by ays, ays-pro easy form, easy form team form by ays +2 moreWordPress Easy Form by AYS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-324985.9 Medium
- ays pro photo gallery by ays, ays-pro photo gallery +1 morePhoto Gallery by Ays < 5.1.7 - Reflected XSSCVE-2023-25686.1 Medium
- ays pro quiz makerQuiz Maker < 6.4.2.7 - Reflected XSSCVE-2023-25716.1 Medium
- ays pro survey makerSurvey Maker < 3.4.7 - Reflected XSSCVE-2023-25726.1 Medium
- ays pro survey makerSurvey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2023-00387.2 High
- ays pro poll makerPoll Maker < 4.0.2 - Admin+ Stored Cross-Site ScriptingCVE-2022-14564.8 Medium
- ays pro poll makerPoll Maker < 3.4.2 - Unauthenticated Time Based SQL InjectionCVE-2021-246517.5 High
- ays pro poll makerPoll Maker <= 3.2.8 - Reflected Cross-Site ScriptingCVE-2021-346356.1 Medium
- ays pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL InjectionsCVE-2021-244847.2 High
- ays pro poll makerPoll Maker < 3.2.1 - Authenticated Blind SQL InjectionsCVE-2021-244837.2 High
- ays pro image slider by ays- responsive slider and carousel, ays-pro image slider +1 moreImage Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL InjectionCVE-2021-244638.8 High
- ays pro photo gallery by ays – responsive image gallery, ays-pro photo gallery +1 morePhoto Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL InjectionsCVE-2021-244628.8 High
- ays pro faq builder ays, ays-pro faq builder +1 moreFAQ Builder < 1.3.6 - Authenticated Blind SQL InjectionsCVE-2021-244618.8 High
- ays pro popup like box – page plugin, ays-pro popup box +1 morePopup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL InjectionsCVE-2021-244608.8 High
- ays pro survey makerSurvey Maker < 1.5.6 - Authenticated Blind SQL InjectionsCVE-2021-244598.8 High
- ays pro popup boxPopup box < 2.3.4 - Authenticated Blind SQL InjectionsCVE-2021-244588.8 High
- ays pro portfolio responsive galleryPortfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL InjectionsCVE-2021-244578.8 High
- ays pro quiz makerQuiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL InjectionsCVE-2021-244567.2 High