Skip to content
Noroxi

ays-pro records

87 published records for vendor ays-pro.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.1%
Pre-auth RCE
1
With a fix record
49.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

87 records
  • CVE-2021-24931
    63This week

    Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

    CriticalCVSS 9.8WeaponizedEPSS 78%

    ays-pro · secure copy content protection and content lockingDec 6, 2021

  • CVE-2024-6028
    43Plan

    Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    ays-pro · quiz makerJun 25, 2024

  • CVE-2022-1013
    41Plan

    Personal Dictionary < 1.3.4 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    ays-pro · personal dictionaryMay 9, 2022

  • CVE-2024-10571
    40Plan

    Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    ays-pro · chartifyNov 14, 2024

  • CVE-2016-10921
    40Plan

    The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    ays-pro · photo galleryAug 22, 2019

  • CVE-2023-22697
    39Monitor

    WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ays-pro · survey makerDec 13, 2024

  • CVE-2025-26971
    39Monitor

    WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ays-pro · poll makerFeb 25, 2025

  • CVE-2025-24577
    39Monitor

    WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ays-pro · poll makerApr 17, 2025

  • CVE-2025-30774
    39Monitor

    WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ays-pro · quiz makerApr 1, 2025

  • CVE-2023-23490
    36Monitor

    The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' paramet

    HighCVSS 8.8No exploitEPSS 2%

    ays-pro · survey makerJan 20, 2023

  • CVE-2021-24457
    35Monitor

    Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · portfolio responsive galleryAug 2, 2021

  • CVE-2021-24461
    35Monitor

    FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · faq builderAug 2, 2021

  • CVE-2021-24460
    35Monitor

    Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · popup boxAug 2, 2021

  • CVE-2021-24458
    35Monitor

    Popup box < 2.3.4 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · popup boxAug 2, 2021

  • CVE-2021-24459
    35Monitor

    Survey Maker < 1.5.6 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · survey makerAug 2, 2021

  • CVE-2021-24463
    35Monitor

    Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · image sliderAug 2, 2021

  • CVE-2021-24462
    35Monitor

    Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections

    HighCVSS 8.8No exploitEPSS 1%

    ays-pro · photo galleryAug 2, 2021

  • CVE-2023-39917
    35Monitor

    WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    ays-pro · photo galleryOct 3, 2023

  • CVE-2025-47545
    32Monitor

    WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    ays-pro · poll makerMay 7, 2025

  • CVE-2021-24651
    30Monitor

    Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection

    HighCVSS 7.5No exploitEPSS 1%

    ays-pro · poll makerOct 11, 2021

  • CVE-2025-10042
    30Monitor

    Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    ays-pro · quiz makerSep 17, 2025

  • CVE-2024-10628
    30Monitor

    Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id

    HighCVSS 7.5No exploitEPSS 0%

    ays-pro · quiz makerJan 26, 2025

  • CVE-2024-7714
    30Monitor

    AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

    HighCVSS 7.5Proof of conceptEPSS 0%

    ays-pro · chatgpt assistantSep 27, 2024

  • CVE-2023-34013
    30Monitor

    WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

    HighCVSS 7.5No exploitEPSS 0%

    ays-pro · poll makerNov 12, 2023

  • CVE-2025-12426
    30Monitor

    Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure

    HighCVSS 7.5No exploitEPSS 0%

    ays-pro · quiz makerNov 19, 2025