Ays Pro Popup Box vulnerabilities

5 vulnerabilities

Known vulnerabilities in Ays Pro Popup Box, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-24458ays propopup box+2
EPSS score
1.36%
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard5.3CVE-2025-57931ays propopup box+1
EPSS score
0.14%
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.This issue affects Popup box: from n/a through <= 5.5.4.5.4CVE-2025-69021ays propopup box+1
EPSS score
0.12%
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.This issue affects Popup box: from n/a through <= 6.0.7.7.1CVE-2026-54192ays propopup box+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.7.6CVE-2026-57631ays propopup box+1
EPSS score
0.38%
Administrator SQL Injection in Popup box <= 6.0.1 versions.