vciy

CVEs we hold for Ays

Records whose assigning authority named Ays as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-8995Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in…ays-pro Poll Maker by AYS – Versus Polls, Anonymous Polls…
CVE-2026-76006Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameterays-pro Photo Gallery by Ays – Responsive Image Gallery
CVE-2026-6817Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason'ays-pro Quiz Maker by AYS
CVE-2026-65565WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2026-57631WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerabilityAys Pro Popup box
CVE-2026-57361WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2026-54192WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityAys Pro Popup box
CVE-2026-32494WordPress Image Slider by Ays plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerabilityAys
CVE-2026-32428WordPress Popup Like box plugin <= 3.7.7 - Broken Access Control vulnerabilityAys Pro Popup Like box
CVE-2026-32402WordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerabilityAys
CVE-2026-32342WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Quiz Maker
CVE-2026-32332WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerabilityAys Pro Easy Form
CVE-2026-32329WordPress Advanced Related Posts plugin <= 1.9.1 - Broken Access Control vulnerabilityAys Pro Advanced Related Posts
CVE-2026-31922WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerabilityAys Pro Fox LMS
CVE-2026-26370no title heldAys Pro Survey Maker
CVE-2026-25346WordPress FAQ Builder AYS plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerabilityAYS
CVE-2026-25338WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerabilityAYS
CVE-2026-25335WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerabilityAys Pro Secure Copy Content Protection and Content Locking
CVE-2026-2384Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeays-pro Quiz Maker
CVE-2026-2367Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting…ays-pro Secure Copy Content Protection and Content Locking
CVE-2026-1336AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2026-1320Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via…ays-pro Secure Copy Content Protection and Content Locking
CVE-2026-1165Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Changeays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2025-69021WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Popup box
CVE-2025-67595WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Quiz Maker
CVE-2025-66529WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Chartify
CVE-2025-66117WordPress Easy Form plugin <= 2.7.8 - Broken Access Control vulnerabilityAys Pro Easy Form
CVE-2025-64276WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerabilityAys Pro Survey Maker
CVE-2025-62039WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerabilityAYS
CVE-2025-58015WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure VulnerabilityAys Pro Quiz Maker
CVE-2025-58014WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) VulnerabilityAys Pro Quiz Maker
CVE-2025-57954WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) VulnerabilityAys Pro Poll Maker
CVE-2025-57947WordPress Photo Gallery by Ays Plugin <= 6.3.8 - Cross Site Scripting (XSS) VulnerabilityAys
CVE-2025-57931WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Popup box
CVE-2025-54673WordPress Chartify plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityAys Pro Chartify
CVE-2025-48098WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2025-48095WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2025-47545WordPress Poll Maker plugin <= 5.7.7 - Race Condition VulnerabilityAys Pro Poll Maker
CVE-2025-32275WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerabilityAys Pro Survey Maker
CVE-2025-32133WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerabilityAys Pro Secure Copy Content Protection and Content Locking
CVE-2025-30905WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityAys Pro Secure Copy Content Protection and Content Locking
CVE-2025-30904WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerabilityAys Pro Chartify
CVE-2025-30774WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerabilityAys Pro Quiz Maker
CVE-2025-27285WordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerabilityAys Pro Easy Form
CVE-2025-26971WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerabilityAys Pro Poll Maker
CVE-2025-24722WordPress FAQ Builder AYS Plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerabilityAYS
CVE-2025-24577WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerabilityAys Pro Poll Maker
CVE-2025-22664WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2025-14454Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletionays-pro Image Slider by Ays- Responsive Slider and Carousel
CVE-2025-14442Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via…ays-pro Secure Copy Content Protection and Content Locking
CVE-2025-14159Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Exportays-pro Secure Copy Content Protection and Content Locking
CVE-2025-14156Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'ays-pro Fox LMS – WordPress LMS Plugin
CVE-2025-1404Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email…ays-pro Secure Copy Content Protection and Content Locking
CVE-2025-13685Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actionsays-pro Photo Gallery by Ays – Responsive Image Gallery
CVE-2025-13381AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2025-13378AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2025-12892Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Updateays-pro Survey Maker
CVE-2025-12891Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposureays-pro Survey Maker
CVE-2025-12620Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2025-12426Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposureays-pro Quiz Maker
CVE-2025-11171Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Functionays-pro Chartify – WordPress Chart Plugin
CVE-2025-10042Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injectionays-pro Quiz Maker
CVE-2024-9874WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injectionays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-9475Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-9462Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-8488Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 -…ays-pro Survey Maker
CVE-2024-6028Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameterays-pro Quiz Maker
CVE-2024-56295WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerabilityAys Pro Poll Maker
CVE-2024-56277WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerabilityAys Pro Poll Maker
CVE-2024-50426WordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerabilityAys Pro Survey Maker
CVE-2024-47347WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityAys Pro Chartify
CVE-2024-47306WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilityAys Pro Secure Copy Content Protection and Content Locking
CVE-2024-3897Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposureays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2024-3601Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumerationays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-3600Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scriptingays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-22027no title heldAYS Pro Plugins WordPress Quiz Maker Plugin
CVE-2024-13505Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Questionays-pro Survey Maker
CVE-2024-12575Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposureays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-12115Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplicationays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-11458FAQ Builder AYS <= 1.7.1 - Reflected Cross-Site Scriptingays-pro FAQ Builder AYS
CVE-2024-10861Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated…ays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2024-1079Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrievalays-pro Quiz Maker
CVE-2024-1078Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modificationays-pro Quiz Maker
CVE-2024-10636Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via…AYS Pro Plugins Quiz Maker Business
CVE-2024-10633Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via…AYS Pro Plugins Quiz Maker Business
CVE-2024-10628Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via idAYS Pro Plugins Quiz Maker Agency
CVE-2024-10574Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration…AYS Pro Plugins Quiz Maker Business
CVE-2024-10571Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via sourceays-pro Chartify – WordPress Chart Plugin
CVE-2023-50904WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerabilityAys Pro Poll Maker
CVE-2023-45766WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerabilityAys Pro Poll Maker
CVE-2023-35764no title heldAYS Pro Plugins Survey Maker
CVE-2023-34423no title heldAYS Pro Plugins Survey Maker
CVE-2023-0038Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scriptingays-pro Survey Maker
CVE-2021-34635Poll Maker <= 3.2.8 - Reflected Cross-Site ScriptingAYS Pro Extensions Poll Maker
CVE-2021-24484Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL InjectionsAys Pro Secure Copy Content Protection and Content Locking
CVE-2021-24483Poll Maker < 3.2.1 - Authenticated Blind SQL InjectionsAys Pro Poll Maker
CVE-2021-24463Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL InjectionAys Pro Image Slider by Ays- Responsive Slider and Carousel
CVE-2021-24462Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL InjectionsAys – Responsive Image Gallery
CVE-2021-24461FAQ Builder < 1.3.6 - Authenticated Blind SQL InjectionsAYS
CVE-2021-24460Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL InjectionsAys Pro Popup Like box – Page Plugin
CVE-2021-24459Survey Maker < 1.5.6 - Authenticated Blind SQL InjectionsAys Pro Survey Maker
CVE-2021-24458Popup box < 2.3.4 - Authenticated Blind SQL InjectionsAys Pro Popup box
CVE-2021-24457Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL InjectionsAys Pro Portfolio Responsive Gallery
CVE-2021-24456Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL InjectionsAys Pro Quiz Maker

104 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.