CVEs we hold for Ays-pro
Records whose assigning authority named Ays-pro as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8995Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in…ays-pro Poll Maker by AYS – Versus Polls, Anonymous Polls…
CVE-2026-76006Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameterays-pro Photo Gallery by Ays – Responsive Image Gallery
CVE-2026-6817Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason'ays-pro Quiz Maker by AYS
CVE-2026-2384Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeays-pro Quiz Maker
CVE-2026-2367Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting…ays-pro Secure Copy Content Protection and Content Locking
CVE-2026-1336AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2026-1320Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via…ays-pro Secure Copy Content Protection and Content Locking
CVE-2026-1165Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Changeays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2025-14454Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletionays-pro Image Slider by Ays- Responsive Slider and Carousel
CVE-2025-14442Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via…ays-pro Secure Copy Content Protection and Content Locking
CVE-2025-14159Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Exportays-pro Secure Copy Content Protection and Content Locking
CVE-2025-14156Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'ays-pro Fox LMS – WordPress LMS Plugin
CVE-2025-1404Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email…ays-pro Secure Copy Content Protection and Content Locking
CVE-2025-13685Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actionsays-pro Photo Gallery by Ays – Responsive Image Gallery
CVE-2025-13381AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2025-13378AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via…ays-pro AI ChatBot with ChatGPT and Content Generator by AYS
CVE-2025-12892Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Updateays-pro Survey Maker
CVE-2025-12891Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposureays-pro Survey Maker
CVE-2025-12620Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2025-12426Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposureays-pro Quiz Maker
CVE-2025-11171Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Functionays-pro Chartify – WordPress Chart Plugin
CVE-2024-9874WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injectionays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-9475Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-9462Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site…ays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-8488Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 -…ays-pro Survey Maker
CVE-2024-6028Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameterays-pro Quiz Maker
CVE-2024-3897Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposureays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2024-3601Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumerationays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-3600Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scriptingays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-13505Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Questionays-pro Survey Maker
CVE-2024-12575Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposureays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-12115Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplicationays-pro Poll Maker – Versus Polls, Anonymous Polls, Image…
CVE-2024-10861Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated…ays-pro Popup Box – Create Countdown, Coupon, Video…
CVE-2024-1079Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrievalays-pro Quiz Maker
CVE-2024-1078Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modificationays-pro Quiz Maker
CVE-2024-10571Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via sourceays-pro Chartify – WordPress Chart Plugin
CVE-2023-0038Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scriptingays-pro Survey Maker
39 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.