CveMateVulnerability intelligence

Ays Pro vulnerabilities

57 vulnerabilities

Known vulnerabilities in Ays Pro products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.

Products

18

Survey Maker10 vulnerabilities
Poll Maker9 vulnerabilities
Quiz Maker6 vulnerabilities
Popup Box5 vulnerabilities
Secure Copy Content Protection And Content Locking5 vulnerabilities
Chartify4 vulnerabilities
Easy Form3 vulnerabilities
FAQ Builder AYS3 vulnerabilities
AI Chatbot With Chatgpt And Content Generator By AYS2 vulnerabilities
Image Slider By Ays2 vulnerabilities
Advanced Related Posts1 vulnerabilities
Fox LMS1 vulnerabilities
Image Slider By Ays Responsive Slider And Carousel1 vulnerabilities
Photo Gallery By Ays1 vulnerabilities
Photo Gallery By Ays – Responsive Image Gallery1 vulnerabilities
Popup Like Box1 vulnerabilities
Popup Like Box – Page Plugin1 vulnerabilities
Portfolio Responsive Gallery1 vulnerabilities

CVE-2026-110379ays proquiz maker7h ago19-10-2026 09:09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91.CVE-2021-24459ays prosurvey maker+25y ago02-08-2021 10:32

The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24484ays prosecure copy content protection and content locking+25y ago02-08-2021 10:32

The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24458ays propopup box+25y ago02-08-2021 10:32

The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24456ays proquiz maker+25y ago02-08-2021 10:32

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard CVE-2021-24483ays propoll maker+25y ago02-08-2021 10:32

The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24463ays proimage slider by ays- responsive slider and carousel+25y ago02-08-2021 10:32

The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24457ays proportfolio responsive gallery+25y ago02-08-2021 10:32

The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24462ays prophoto gallery by ays – responsive image gallery+25y ago02-08-2021 10:32

The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24461ays profaq builder ays+25y ago02-08-2021 10:32

The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2021-24460ays propopup like box – page plugin+25y ago02-08-2021 10:32

The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard CVE-2025-54673ays prochartify+11y ago14-08-2025 10:34

Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.5.3.CVE-2025-62039ays proai chatbot with chatgpt and content generator by ays+111mo ago06-11-2025 15:55

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6.CVE-2025-26971ays propoll maker+21y ago25-02-2025 14:17

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through <= 5.6.5.CVE-2025-47545ays propoll maker+21y ago07-05-2025 14:20

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through <= 5.7.7.CVE-2025-48095ays prosurvey maker+112mo ago22-10-2025 14:32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.CVE-2025-48098ays prosurvey maker+112mo ago22-10-2025 14:32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.CVE-2025-66529ays prochartify+110mo ago09-12-2025 14:13

Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.6.3.CVE-2025-66117ays proeasy form+110mo ago18-12-2025 07:22

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through <= 2.7.8.CVE-2025-58015ays proquiz maker+21y ago22-09-2025 18:24

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Ays Pro Quiz Maker quiz-maker allows Retrieve Embedded Sensitive Data.This issue affects Quiz Maker: from n/a through <= 6.7.0.65.