AY
Vendor
ays-pro
159
CVEs
0
On KEV
2
New 30D
Products
QM9.8
Quiz Maker
ays-pro
20 CVEs0 on KEV1 new
PB5.3
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
ays-pro
4 CVEs0 on KEV1 new
SM9.8
Survey Maker
ays-pro
24 CVEs0 on KEV0 new
PM9.8
Poll Maker
Ays Pro
21 CVEs0 on KEV0 new
PB8.8
Popup box
Ays Pro
16 CVEs0 on KEV0 new
SC9.8
Secure Copy Content Protection and Content Locking
ays-pro
15 CVEs0 on KEV0 new
PM7.2
Poll Maker – Versus Polls, Anonymous Polls, Image Polls
ays-pro
8 CVEs0 on KEV0 new
CH9.8
Chartify
Ays Pro
6 CVEs0 on KEV0 new
PG9.8
Photo Gallery
Ays-pro
6 CVEs0 on KEV0 new
AC7.5
AI ChatBot with ChatGPT and Content Generator by AYS
ays-pro
5 CVEs0 on KEV0 new
EF7.5
Easy Form
Ays Pro
4 CVEs0 on KEV0 new
FB8.8
FAQ Builder AYS
ays-pro
4 CVEs0 on KEV0 new
PG8.8
Photo Gallery by Ays – Responsive Image Gallery
ays-pro
3 CVEs0 on KEV0 new
AC7.5
AI Chatbot With Chatgpt
Ays-pro
2 CVEs0 on KEV0 new
CW9.8
Chartify – WordPress Chart Plugin
ays-pro
2 CVEs0 on KEV0 new
CA7.5
Chatgpt Assistant
Ays-pro
2 CVEs0 on KEV0 new
IS7.1
Image Slider by Ays
Ays Pro
2 CVEs0 on KEV0 new
IS8.8
Image Slider by Ays- Responsive Slider and Carousel
ays-pro
2 CVEs0 on KEV0 new
PL6.1
Popup Like box
Ays Pro
2 CVEs0 on KEV0 new
AR5.3
Advanced Related Posts
Ays Pro
1 CVEs0 on KEV0 new
FB8.8
Faq Builder
Ays-pro
1 CVEs0 on KEV0 new
FL8.5
Fox LMS
Ays Pro
1 CVEs0 on KEV0 new
FL9.8
Fox LMS – WordPress LMS Plugin
ays-pro
1 CVEs0 on KEV0 new
IS8.8
Image Slider
Ays-pro
1 CVEs0 on KEV0 new
PD9.8
Personal Dictionary
Ays-pro
1 CVEs0 on KEV0 new
PG6.5
Photo Gallery by Ays
Ays Pro
1 CVEs0 on KEV0 new
PM4.3
Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls
ays-pro
1 CVEs0 on KEV0 new
PL8.8
Popup Like box – Page Plugin
Ays Pro
1 CVEs0 on KEV0 new
PR8.8
Portfolio Responsive Gallery
Ays Pro
1 CVEs0 on KEV0 new
QM5.8
Quiz Maker by AYS
ays-pro
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110379 | QM Quiz Maker Ays Pro | 7.1 | Oct 19 | WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-100159 | PB Popup Box – Create Countdown, Coupon, Video, Contact Form Popups ays-pro | 4.8 | Oct 16 | Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers |
| CVE-2026-76006 | PG Photo Gallery by Ays – Responsive Image Gallery ays-pro | 4.9 | Sep 1 | Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter |
| CVE-2026-65565 | SM Survey Maker Ays Pro | 7.1 | Aug 6 | WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57361 | SM Survey Maker Ays Pro | 7.1 | Jul 2 | WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57631 | PB Popup box Ays Pro | 7.6 | Jun 26 | WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability |
| CVE-2026-54192 | PB Popup box Ays Pro | 7.1 | Jun 17 | WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-8995 | PM Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls ays-pro | 4.3 | May 29 | Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action |
| CVE-2026-6817 | QM Quiz Maker by AYS ays-pro | 5.8 | May 2 | Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' |
| CVE-2025-15611 | PB Popup Box Ays-pro | 5.4 | Apr 7 | Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF |
| CVE-2026-32494 | IS Image Slider by Ays Ays Pro | 7.1 | Mar 25 | WordPress Image Slider by Ays plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-25346 | FB FAQ Builder AYS Ays Pro | 7.1 | Mar 25 | WordPress FAQ Builder AYS plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-32428 | PL Popup Like box Ays Pro | 5.3 | Mar 13 | WordPress Popup Like box plugin <= 3.7.7 - Broken Access Control vulnerability |
| CVE-2026-32402 | IS Image Slider by Ays Ays Pro | 5.3 | Mar 13 | WordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerability |
| CVE-2026-32342 | QM Quiz Maker Ays Pro | 4.3 | Mar 13 | WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-32332 | EF Easy Form Ays Pro | 5.3 | Mar 13 | WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerability |
| CVE-2026-32329 | AR Advanced Related Posts Ays Pro | 5.3 | Mar 13 | WordPress Advanced Related Posts plugin <= 1.9.1 - Broken Access Control vulnerability |
| CVE-2026-31922 | FL Fox LMS Ays Pro | 8.5 | Mar 13 | WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability |
| CVE-2026-1336 | AC AI ChatBot with ChatGPT and Content Generator by AYS ays-pro | 5.3 | Mar 2 | AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification |
| CVE-2026-2367 | SC Secure Copy Content Protection and Content Locking ays-pro | 6.4 | Feb 25 | Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute |
| CVE-2026-26370 | SM Survey Maker Ays Pro | 6.1 | Feb 20 | WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability |
| CVE-2026-2384 | QM Quiz Maker ays-pro | 6.4 | Feb 20 | Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2026-25338 | AC AI ChatBot with ChatGPT and Content Generator by AYS Ays Pro | 5.3 | Feb 19 | WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerability |
| CVE-2026-25335 | SC Secure Copy Content Protection and Content Locking Ays Pro | 4.3 | Feb 19 | WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability |
| CVE-2026-1320 | SC Secure Copy Content Protection and Content Locking ays-pro | 7.2 | Feb 12 | Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header |
| CVE-2026-1165 | PB Popup Box – Create Countdown, Coupon, Video, Contact Form Popups ays-pro | 4.3 | Jan 31 | Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change |
| CVE-2025-69021 | PB Popup box Ays Pro | 5.4 | Dec 30 | WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-66117 | EF Easy Form Ays Pro | 7.5 | Dec 18 | WordPress Easy Form plugin <= 2.7.8 - Broken Access Control vulnerability |
| CVE-2025-14156 | FL Fox LMS – WordPress LMS Plugin ays-pro | 9.8 | Dec 15 | Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder' |
| CVE-2025-14454 | IS Image Slider by Ays- Responsive Slider and Carousel ays-pro | 4.3 | Dec 13 | Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletion |
| CVE-2025-14159 | SC Secure Copy Content Protection and Content Locking ays-pro | 4.3 | Dec 12 | Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export |
| CVE-2025-14442 | SC Secure Copy Content Protection and Content Locking ays-pro | 5.3 | Dec 12 | Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File |
| CVE-2025-67595 | QM Quiz Maker Ays Pro | 4.3 | Dec 9 | WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-66529 | CH Chartify Ays Pro | 4.3 | Dec 9 | WordPress Chartify plugin <= 3.6.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-13685 | PG Photo Gallery by Ays – Responsive Image Gallery ays-pro | 4.3 | Dec 2 | Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actions |
| CVE-2025-13381 | AC AI ChatBot with ChatGPT and Content Generator by AYS ays-pro | 5.3 | Nov 27 | AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads |
| CVE-2025-13378 | AC AI ChatBot with ChatGPT and Content Generator by AYS ays-pro | 6.5 | Nov 27 | AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter |
| CVE-2025-12426 | QM Quiz Maker ays-pro | 7.5 | Nov 19 | Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure |
| CVE-2025-64276 | SM Survey Maker Ays Pro | 6.5 | Nov 13 | WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability |
| CVE-2025-12620 | PM Poll Maker – Versus Polls, Anonymous Polls, Image Polls ays-pro | 4.9 | Nov 13 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter |
| CVE-2025-12891 | SM Survey Maker ays-pro | 5.3 | Nov 13 | Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure |
| CVE-2025-12892 | SM Survey Maker ays-pro | 5.3 | Nov 13 | Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update |
| CVE-2025-62039 | AC AI ChatBot with ChatGPT and Content Generator by AYS Ays Pro | 7.5 | Nov 6 | WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability |
| CVE-2025-57931 | PB Popup box Ays Pro | 5.3 | Oct 29 | WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-48098 | SM Survey Maker Ays Pro | 7.1 | Oct 22 | WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-48095 | SM Survey Maker Ays Pro | 5.9 | Oct 22 | WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-11171 | CW Chartify – WordPress Chart Plugin ays-pro | 5.3 | Oct 8 | Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function |
| CVE-2025-57947 | PG Photo Gallery by Ays Ays Pro | 6.5 | Sep 22 | WordPress Photo Gallery by Ays Plugin <= 6.3.8 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-57954 | PM Poll Maker Ays Pro | 6.5 | Sep 22 | WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-58014 | QM Quiz Maker Ays Pro | 4.3 | Sep 22 | WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-58015 | QM Quiz Maker Ays Pro | 7.5 | Sep 22 | WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability |
| CVE-2025-10042 | QM Quiz Maker ays-pro | 7.5 | Sep 17 | Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection |
| CVE-2024-12575 | PM Poll Maker – Versus Polls, Anonymous Polls, Image Polls ays-pro | 5.3 | Aug 16 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure |
| CVE-2025-54673 | CH Chartify Ays Pro | 4.3 | Aug 14 | WordPress Chartify plugin <= 3.5.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-9599 | PB Popup Box Ays-pro | 5.4 | May 15 | Popup Box < 4.7.8 - Admin+ Stored XSS |
| CVE-2024-8617 | QM Quiz Maker Ays-pro | 4.8 | May 15 | Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS |
| CVE-2025-47545 | PM Poll Maker Ays Pro | 8.1 | May 7 | WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability |
| CVE-2025-24577 | PM Poll Maker Ays Pro | 9.8 | Apr 17 | WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability |
| CVE-2025-27285 | EF Easy Form Ays Pro | 7.1 | Apr 17 | WordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-32275 | SM Survey Maker Ays Pro | 5.3 | Apr 10 | WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability |
