AYS PRO vulnerabilities
98 CVEs and advisories name AYS PRO as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30904WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-1404Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function
- CVE-2025-26971WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability
- CVE-2025-22664WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-13505Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question
- CVE-2025-24722WordPress FAQ Builder AYS Plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-56277WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability
- CVE-2024-56295WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability
- CVE-2023-45766WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability
- CVE-2023-50904WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability
- CVE-2024-12115Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
- CVE-2024-11458FAQ Builder AYS <= 1.7.1 - Reflected Cross-Site Scripting
- CVE-2024-10861Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update
- CVE-2024-10571Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
- CVE-2024-9874WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection
- CVE-2024-50426WordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-9462Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings
- CVE-2024-9475Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
- CVE-2024-8488Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2024-47306WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-47347WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-6028Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
- CVE-2024-3601Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration
- CVE-2024-3897Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
- CVE-2024-3600Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
- CVE-2024-1078Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
- CVE-2024-1079Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
- CVE-2023-0038Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-24484Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
- CVE-2021-24483Poll Maker < 3.2.1 - Authenticated Blind SQL Injections