AYS PRO vulnerabilities
98 CVEs and advisories name AYS PRO as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-14442Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File
- CVE-2025-67595WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-66529WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-13685Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actions
- CVE-2025-13381AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads
- CVE-2025-13378AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
- CVE-2025-12426Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure
- CVE-2025-64276WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability
- CVE-2025-12620Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
- CVE-2025-12891Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure
- CVE-2025-12892Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update
- CVE-2025-62039WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability
- CVE-2025-57931WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-48098WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-48095WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-11171Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function
- CVE-2025-57947WordPress Photo Gallery by Ays Plugin <= 6.3.8 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-57954WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-58014WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-58015WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability
- CVE-2025-10042Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
- CVE-2024-12575Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure
- CVE-2025-54673WordPress Chartify plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-47545WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability
- CVE-2025-24577WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability
- CVE-2025-27285WordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-32275WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability
- CVE-2025-32133WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-30905WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-30774WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability