ays-pro Vulnerability Advisory Catalog

Total 84 security vulnerabilities recorded for ays-pro software and firmware.

← Back to All Vendors
CVE-2024-9874 MEDIUM
Component: poll_maker

The Poll Maker โ€“ Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injection via the โ€˜orderbyโ€™ parameter...

๐Ÿ“… 2024-11-09
CVSS 4.9 Dossier →
Component: survey_maker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored ...

๐Ÿ“… 2024-10-29
CVSS 5.9 Dossier →
CVE-2024-9475 MEDIUM
Component: poll_maker

The Poll Maker โ€“ Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in ...

๐Ÿ“… 2024-10-26
CVSS 4.9 Dossier →
CVE-2024-9462 MEDIUM
Component: poll_maker

The Poll Maker โ€“ Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all...

๐Ÿ“… 2024-10-26
CVSS 5.5 Dossier →
CVE-2024-8488 MEDIUM
Component: survey_maker

The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Survey fields in all versions up to, and including, 4.9.7 due t...

๐Ÿ“… 2024-10-08
CVSS 4.4 Dossier →
Component: chatgpt_assistant

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated us...

๐Ÿ“… 2024-09-27
CVSS 7.5 Dossier →
Component: chatgpt_assistant

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users t...

๐Ÿ“… 2024-09-27
CVSS 7.5 Dossier →
CVE-2024-6889 MEDIUM
Component: secure_copy_content_protection_and_content_locking

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could al...

๐Ÿ“… 2024-09-04
CVSS 4.8 Dossier →
CVE-2024-6888 MEDIUM
Component: secure_copy_content_protection_and_content_locking

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could al...

๐Ÿ“… 2024-09-04
CVSS 4.8 Dossier →
CVE-2024-6138 MEDIUM
Component: secure_copy_content_protection_and_content_locking

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could al...

๐Ÿ“… 2024-07-11
CVSS 4.8 Dossier →
Component: photo_gallery

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery b...

๐Ÿ“… 2024-07-09
CVSS 3.8 Dossier →
CVE-2024-6028 CRITICAL
Component: quiz_maker

The Quiz Maker plugin for WordPress is vulnerable to time-based SQL Injection via the 'ays_questions' parameter in all versions up to, and including, ...

๐Ÿ“… 2024-06-25
CVSS 9.8 Dossier →
CVE-2024-4061 MEDIUM
Component: survey_maker

The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admi...

๐Ÿ“… 2024-05-21
CVSS 4.8 Dossier →
CVE-2024-3601 MEDIUM
Component: poll_maker

The Poll Maker โ€“ Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the...

๐Ÿ“… 2024-05-02
CVSS 5.3 Dossier →
Component: quiz_maker

Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: from n/a through 6.3.9.4....

๐Ÿ“… 2024-04-24
CVSS 3.7 Dossier →
Component: poll_maker

The Poll Maker โ€“ Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the...

๐Ÿ“… 2024-04-19
CVSS 7.2 Dossier →
Component: survey_maker

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address wh...

๐Ÿ“… 2024-04-03
CVSS 5.3 Dossier →
Component: survey_maker

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be execu...

๐Ÿ“… 2024-04-03
CVSS 6.1 Dossier →
Component: survey_maker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Survey Maker team Survey Maker allows Reflected ...

๐Ÿ“… 2024-03-27
CVSS 7.1 Dossier →
Component: survey_maker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Survey Maker team Survey Maker allows Stored XSS...

๐Ÿ“… 2024-03-19
CVSS 5.9 Dossier →
CVE-2023-6591 MEDIUM
Component: popup_box

The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t...

๐Ÿ“… 2024-02-12
CVSS 4.8 Dossier →
Component: chartify

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chart Builder Team Chartify โ€“ WordPress Chart Pl...

๐Ÿ“… 2024-02-12
CVSS 5.9 Dossier →
CVE-2024-1079 MEDIUM
Component: quiz_maker

The Quiz Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_show_results() function ...

๐Ÿ“… 2024-02-07
CVSS 5.3 Dossier →
CVE-2024-1078 MEDIUM
Component: quiz_maker

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ays_quick_start() and ...

๐Ÿ“… 2024-02-07
CVSS 4.3 Dossier →
Page 2 of 4 (84 Total Records)