Skip to content
OpenAdvisories

Vendor

Ays Pro

98 known vulnerabilities.

Products

Survey Maker 15 Quiz Maker 13 Secure Copy Content Protection and Content Locking 10 Poll Maker 9 Poll Maker – Versus Polls, Anonymous Polls, Image Polls 8 AI ChatBot with ChatGPT and Content Generator by AYS 5 Popup box 5 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups 4 FAQ Builder AYS 4 Chartify 4 Photo Gallery by Ays – Responsive Image Gallery 3 Easy Form 3 Image Slider by Ays 2 Chartify – WordPress Chart Plugin 2 Image Slider by Ays- Responsive Slider and Carousel 2 Quiz Maker by AYS 1 Portfolio Responsive Gallery 1 Popup Like box – Page Plugin 1 Popup Like box 1 Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls 1 Fox LMS – WordPress LMS Plugin 1 Advanced Related Posts 1 Fox LMS 1 Photo Gallery by Ays 1
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • High 7.1
    CVE-2026-110379

    WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91.

    Ays Pro Quiz Maker
  • High 7.1
    CVE-2026-65565

    WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.

    Ays Pro Survey Maker
  • High 7.1
    CVE-2026-57361

    WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.

    Ays Pro Survey Maker
  • High 7.6
    CVE-2026-57631

    WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability

    Administrator SQL Injection in Popup box <= 6.0.1 versions.

    Ays Pro Popup box
  • High 7.1
    CVE-2026-54192

    WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.

    Ays Pro Popup box
  • High 7.1
    CVE-2026-32494

    WordPress Image Slider by Ays plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n…

    Ays Pro Image Slider by Ays
  • High 7.1
    CVE-2026-25346

    WordPress FAQ Builder AYS plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAQ Builder AYS: from n/a …

    Ays Pro FAQ Builder AYS
  • High 8.5
    CVE-2026-31922

    WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS: from n/a through <= 1.0.6.3.

    Ays Pro Fox LMS
  • High 7.2
    CVE-2026-1320

    Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header

    The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' HTTP header in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escapi…

    Ays Pro Secure Copy Content Protection and Content Locking Web / CMS
  • High 7.5
    CVE-2025-66117

    WordPress Easy Form plugin <= 2.7.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through <= 2.7.8.

    Ays Pro Easy Form
  • High 7.5
    CVE-2025-62039 Scanner template

    WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by A…

    Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS
  • High 7.1
    CVE-2025-48098

    WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.

    Ays Pro Survey Maker
  • High 7.1
    CVE-2025-27285

    WordPress Easy Form by AYS Plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Easy Form easy-form allows Reflected XSS.This issue affects Easy Form: from n/a through <= 2.6.9.

    Ays Pro Easy Form
  • High 7.1
    CVE-2025-30905

    WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection…

    Ays Pro Secure Copy Content Protection and Content Locking
  • High 8.2
    CVE-2025-30774

    WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through <= 6.6.8.7.

    Ays Pro Quiz Maker
  • High 7.6
    CVE-2025-26971

    WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through <= 5.6.5.

    Ays Pro Poll Maker
  • High 7.1
    CVE-2024-47306

    WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection-subscribe-to-view allows Stored XSS.This issue affects Secure Copy …

    Ays Pro Secure Copy Content Protection and Content Locking
  • High 7.1
    CVE-2024-47347

    WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through <= 2.7.6.

    Ays Pro Chartify
  • High 7.2
    CVE-2024-3600

    Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

    The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions…

    Ays Pro Poll Maker – Versus Polls, Anonymous Polls, Image Polls Web / CMS
  • High 7.2
    CVE-2023-0038

    Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting

    The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible f…

    Ays Pro Survey Maker Web / CMS