ays-pro Vulnerability Advisory Catalog

Total 84 security vulnerabilities recorded for ays-pro software and firmware.

← Back to All Vendors
Component: popup_box

The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowi...

📅 2026-04-07
CVSS 5.4 Dossier →
Component: quiz_maker

Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from...

📅 2025-12-09
CVSS 4.3 Dossier →
Component: quiz_maker

The Quiz Maker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.7.0.80. This is due to the...

📅 2025-11-19
CVSS 5.3 Dossier →
Component: quiz_maker

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Ays Pro Quiz Maker quiz-maker allows Retrieve Embedded Sen...

📅 2025-09-22
CVSS 5.3 Dossier →
Component: quiz_maker

Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from...

📅 2025-09-22
CVSS 4.3 Dossier →
Component: quiz_maker

The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insuff...

📅 2025-09-17
CVSS 5.9 Dossier →
CVE-2024-9599 MEDIUM
Component: popup_box

The Popup Box WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t...

📅 2025-05-15
CVSS 5.4 Dossier →
CVE-2024-8617 MEDIUM
Component: quiz_maker

The Quiz Maker WordPress plugin before 6.5.9.9 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin...

📅 2025-05-15
CVSS 4.8 Dossier →
Component: poll_maker

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leve...

📅 2025-05-07
CVSS 5.3 Dossier →
Component: poll_maker

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...

📅 2025-04-17
CVSS 6.5 Dossier →
Component: survey_maker

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/...

📅 2025-04-10
CVSS 4.3 Dossier →
Component: quiz_maker

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injecti...

📅 2025-04-01
CVSS 8.2 Dossier →
Component: poll_maker

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin ...

📅 2025-03-16
CVSS 4.8 Dossier →
Component: poll_maker

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL I...

📅 2025-02-25
CVSS 7.6 Dossier →
Component: survey_maker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored ...

📅 2025-02-04
CVSS 5.9 Dossier →
Component: survey_maker

The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ays_sections[5][questions][8][title]’ parameter in all ver...

📅 2025-01-26
CVSS 5.5 Dossier →
Component: quiz_maker

The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and ...

📅 2025-01-26
CVSS 7.5 Dossier →
Component: poll_maker

Improper Encoding or Escaping of Output vulnerability in Ays Pro Poll Maker poll-maker.This issue affects Poll Maker: from n/a through < 5.5.5....

📅 2025-01-21
CVSS 5.3 Dossier →
Component: poll_maker

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...

📅 2025-01-15
CVSS 6.5 Dossier →
Component: poll_maker

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...

📅 2025-01-02
CVSS 5.3 Dossier →
Component: survey_maker

Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This iss...

📅 2024-12-13
CVSS 5.3 Dossier →
Component: poll_maker

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...

📅 2024-12-09
CVSS 5.3 Dossier →
Component: poll_maker

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an...

📅 2024-12-07
CVSS 4.3 Dossier →
CVE-2024-10571 CRITICAL
Component: chartify

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the '...

📅 2024-11-14
CVSS 9.8 Dossier →
Page 1 of 4 (84 Total Records)