CveMateVulnerability intelligence

Ays Pro vulnerabilities

109 vulnerabilities

Known vulnerabilities in Ays Pro products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.

Products

24

Poll Maker20 vulnerabilities
Quiz Maker18 vulnerabilities
Survey Maker18 vulnerabilities
Popup Box10 vulnerabilities
Secure Copy Content Protection And Content Locking10 vulnerabilities
Poll Maker – Versus Polls, Anonymous Polls, Image Polls8 vulnerabilities
Photo Gallery6 vulnerabilities
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups4 vulnerabilities
AI Chatbot With Chatgpt And Content Generator By AYS3 vulnerabilities
Chartify2 vulnerabilities
Chartify – Wordpress Chart Plugin2 vulnerabilities
Chatgpt Assistant2 vulnerabilities
Photo Gallery By Ays – Responsive Image Gallery2 vulnerabilities
Easy Form1 vulnerabilities
Faq Builder1 vulnerabilities
FAQ Builder AYS1 vulnerabilities
Fox LMS – Wordpress LMS Plugin1 vulnerabilities
Image Slider1 vulnerabilities
Image Slider By Ays Responsive Slider And Carousel1 vulnerabilities
Personal Dictionary1 vulnerabilities
Poll Maker By AYS – Versus Polls, Anonymous Polls, Image Polls1 vulnerabilities
Popup Like Box1 vulnerabilities
Portfolio Responsive Gallery1 vulnerabilities
Quiz Maker By AYS1 vulnerabilities

CVE-2026-100159ays-propopup box – create countdown, coupon, video, contact form popups4d ago16-10-2026 02:26

The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is due to the ays_popup_get_user_ip() function reading the client-controlled Client-IP / X-Forwarded-For / Forwarded / X-Forwarded / Forwarded-For request headers, sanitizing them only with sanitize_text_field() (which does not strip the bracket, quote, space, or '=' characters used by shortcode syntax), substituting the value into a popup body wherever the %%user_ip_address%% token appears (a raw str_replace with no escaping in Ays_Pb_Data::replace_message_variables()), and then passing the resulting body to do_shortcode() in Ays_Pb_Public::ays_autoembed() at output on the wp_footer hook. This makes it possible for unauthenticated attackers to execute arbitrary registered shortcodes with attacker-supplied attributes on the server whenever an administrator has added the %%user_ip_address%% token to a popup's Custom Content body, which can be leveraged to read arbitrary data or perform other actions exposed by shortcodes installed on the site.CVE-2021-26256ays-prosurvey_maker+24y ago21-02-2022 17:49

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6).CVE-2021-24459ays prosurvey maker+25y ago02-08-2021 10:32

The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24484ays prosecure copy content protection and content locking+25y ago02-08-2021 10:32

The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24458ays propopup box+25y ago02-08-2021 10:32

The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24456ays proquiz maker+25y ago02-08-2021 10:32

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard CVE-2021-24651ays-propoll_maker+25y ago11-10-2021 10:45

The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as password hash.CVE-2021-24931ays-prosecure_copy_content_protection_and_content_locking+24y ago06-12-2021 15:55

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.CVE-2021-24483ays propoll maker+25y ago02-08-2021 10:32

The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24463ays proimage slider by ays- responsive slider and carousel+25y ago02-08-2021 10:32

The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24457ays proportfolio responsive gallery+25y ago02-08-2021 10:32

The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24462ays prophoto gallery by ays – responsive image gallery+25y ago02-08-2021 10:32

The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24461ays profaq builder ays+25y ago02-08-2021 10:32

The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24460ays propopup like box – page plugin+25y ago02-08-2021 10:32

The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-34635ays pro extensionspoll maker+25y ago02-08-2021 20:39

The Poll Maker WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the mcount parameter found in the ~/admin/partials/settings/poll-maker-settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.2.8.CVE-2016-10921ays-prophoto_gallery+17y ago22-08-2019 12:33

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.CVE-2025-13381ays-proai chatbot with chatgpt and content generator by ays+110mo ago27-11-2025 09:27

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'ays_chatgpt_save_wp_media' function in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to upload media files.CVE-2025-13685ays-prophoto gallery by ays – responsive image gallery+110mo ago02-12-2025 06:40

The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8. This is due to missing nonce verification on the bulk action functionality in the 'process_bulk_action()' function. This makes it possible for unauthenticated attackers to perform bulk operations (delete, publish, or unpublish galleries) via a forged request granted they can trick an administrator into performing an action such as clicking on a link.CVE-2025-13378ays-proai chatbot with chatgpt and content generator by ays+110mo ago27-11-2025 09:27

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the ays_chatgpt_pinecone_upsert function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.CVE-2025-1404ays-prosecure_copy_content_protection_and_content_locking+11y ago01-03-2025 11:22

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_sccp_reports_user_search() function in all versions up to, and including, 4.4.7. This makes it possible for unauthenticated attackers to retrieve a list of registered user emails.