Ays-pro vulnerabilities

Products

• Poll Maker 20
• Quiz Maker 17
• Secure Copy Content Protection And Content Locking 17
• Survey Maker 16
• Popup Box 12
• Poll Maker – Versus Polls, Anonymous Polls, Image Polls 8
• Ai Chatbot With Chatgpt And Content Generator By Ays 7
• Photo Gallery 6
• Quiz Maker 6
• Secure Copy Content Protection And Content Locking 6
• Photo Gallery By Ays – Responsive Image Gallery 5
• Survey Maker 5
• Popup Box – Create Countdown, Coupon, Video, Contact Form Popups 4
• Chartify – Wordpress Chart Plugin 3
• Ai Chatbot With Chatgpt 2
• Chartify 2
• Chatgpt Assistant 2
• Image Slider By Ays- Responsive Slider And Carousel 2

Newest

• ays-pro popup box – create countdown, coupon, video, contact form popups Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers CVE-2026-100159 4.8 MediumOctober 16, 2026
• ays-pro photo gallery by ays – responsive image gallery Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter CVE-2026-76006 4.9 MediumSeptember 1, 2026
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking < 5.1.5 - Admin+ Stored XSS via ays_sccp_sub_icon_image Parameter CVE-2026-9269 3.5 LowJune 12, 2026
• ays-pro poll maker by ays – versus polls, anonymous polls, image polls Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action CVE-2026-8995 4.3 MediumMay 29, 2026
• ays-pro quiz maker by ays Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' CVE-2026-6817 5.8 MediumMay 2, 2026
• ays-pro popup box Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF CVE-2025-15611 5.4 MediumApril 7, 2026
• ays-pro ai chatbot with chatgpt and content generator by ays AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification CVE-2026-1336 5.3 MediumMarch 2, 2026
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute CVE-2026-2367 6.4 MediumFebruary 25, 2026
• ays pro quiz maker Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2026-2384 6.4 MediumFebruary 20, 2026
• ays pro ai chatbot with chatgpt and content generator by ays WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerability CVE-2026-25338 5.3 MediumFebruary 19, 2026
• ays pro secure copy content protection and content locking WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability CVE-2026-25335 4.3 MediumFebruary 19, 2026
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header CVE-2026-1320 7.2 HighFebruary 12, 2026
• ays-pro popup box – create countdown, coupon, video, contact form popups Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change CVE-2026-1165 4.3 MediumJanuary 31, 2026
• ays-pro fox lms – wordpress lms plugin Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder' CVE-2025-14156 Public exploit 9.8 CriticalDecember 15, 2025
• ays-pro image slider by ays- responsive slider and carousel Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletion CVE-2025-14454 4.3 MediumDecember 13, 2025
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File CVE-2025-14442 5.3 MediumDecember 12, 2025
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export CVE-2025-14159 4.3 MediumDecember 12, 2025
• ays pro quiz maker WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67595 4.3 MediumDecember 9, 2025
• ays-pro photo gallery by ays – responsive image gallery Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actions CVE-2025-13685 4.3 MediumDecember 2, 2025
• ays-pro ai chatbot with chatgpt and content generator by ays AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads CVE-2025-13381 5.3 MediumNovember 27, 2025
• ays-pro ai chatbot with chatgpt and content generator by ays AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter CVE-2025-13378 6.5 MediumNovember 27, 2025
• ays pro quiz maker Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure CVE-2025-12426 5.3 MediumNovember 19, 2025
• ays-pro poll maker – versus polls, anonymous polls, image polls Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter CVE-2025-12620 4.9 MediumNovember 13, 2025
• ays pro survey maker Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure CVE-2025-12891 5.3 MediumNovember 13, 2025
• ays pro survey maker Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update CVE-2025-12892 5.3 MediumNovember 13, 2025
• ays pro ai chatbot with chatgpt and content generator by ays WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability CVE-2025-62039 7.5 HighNovember 6, 2025
• ays-pro chartify – wordpress chart plugin Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function CVE-2025-11171 Public exploit 5.3 MediumOctober 8, 2025
• ays pro quiz maker WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability CVE-2025-58015 5.3 MediumSeptember 22, 2025
• ays pro quiz maker WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-58014 4.3 MediumSeptember 22, 2025
• ays pro quiz maker Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection CVE-2025-10042 Public exploit 5.9 MediumSeptember 17, 2025
• ays-pro poll maker – versus polls, anonymous polls, image polls Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure CVE-2024-12575 5.3 MediumAugust 16, 2025
• ays-pro popup box Popup Box < 4.7.8 - Admin+ Stored XSS CVE-2024-9599 5.4 MediumMay 15, 2025
• ays pro quiz maker Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS CVE-2024-8617 4.8 MediumMay 15, 2025
• ays pro poll maker WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability CVE-2025-47545 5.3 MediumMay 7, 2025
• ays pro poll maker WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability CVE-2025-24577 6.5 MediumApril 17, 2025
• ays pro survey maker WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability CVE-2025-32275 4.3 MediumApril 10, 2025
• ays pro secure copy content protection and content locking WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-32133 5.9 MediumApril 4, 2025
• ays pro secure copy content protection and content locking WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-30905 7.1 HighApril 1, 2025
• ays pro quiz maker WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability CVE-2025-30774 8.2 HighApril 1, 2025
• ays pro poll maker Poll Maker < 5.5.4 - Admin+ Stored XSS CVE-2024-13602 4.8 MediumMarch 16, 2025
• ays-pro secure copy content protection and content locking Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function CVE-2025-1404 5.3 MediumMarch 1, 2025
• ays pro poll maker WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability CVE-2025-26971 7.6 HighFebruary 25, 2025
• ays pro survey maker WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-22664 5.9 MediumFebruary 4, 2025
• ays pro survey maker Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question CVE-2024-13505 5.5 MediumJanuary 26, 2025
• ays pro plugins quiz maker business, ays-pro quiz maker, ays pro plugins quiz maker agency +1 more +3 more Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id CVE-2024-10628 7.5 HighJanuary 26, 2025
• ays pro poll maker WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability CVE-2024-56277 5.3 MediumJanuary 21, 2025
• ays pro poll maker WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability CVE-2024-56295 6.5 MediumJanuary 15, 2025
• ays pro poll maker WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability CVE-2023-45766 5.3 MediumJanuary 2, 2025
• ays pro survey maker, survey maker team maker +1 more WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability CVE-2023-22697 5.3 MediumDecember 13, 2024
• ays pro poll maker, poll maker team maker +1 more WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability CVE-2023-50904 5.3 MediumDecember 9, 2024
• Show olderLoading…