ays-pro vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202414
3. 202516
4. 20269

Newest CVEs

• CVE-2026-100159

  Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers

  ays-pro · Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

  Medium4.8
• CVE-2026-76006

  Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  ays-pro · Photo Gallery by Ays – Responsive Image Gallery

  Medium4.9
• CVE-2026-8995

  Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action

  ays-pro · Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls

  Medium4.3
• CVE-2026-6817

  Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason'

  ays-pro · Quiz Maker by AYS

  Medium5.8
• CVE-2026-1336

  AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification

  ays-pro · AI ChatBot with ChatGPT and Content Generator by AYS

  Medium5.3
• CVE-2026-2367

  Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

  ays-pro · Secure Copy Content Protection and Content Locking

  Medium6.4
• CVE-2026-2384

  Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  ays-pro · Quiz Maker

  Medium6.4
• CVE-2026-1320

  Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header

  ays-pro · Secure Copy Content Protection and Content Locking

  High7.2
• CVE-2026-1165

  Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change

  ays-pro · Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

  Medium4.3
• CVE-2025-14156

  Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'

  ays-pro · Fox LMS – WordPress LMS Plugin

  Critical9.8