ays-pro kayıtları
ays-pro üreticisine ait 87 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %1,1
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %49,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')34
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')22
- CWE-862 Missing Authorization14
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-319 Cleartext Transmission of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
87 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
63Bu hafta | CVE-2021-24931Silahlaştırılmış | Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injectionays-pro · secure copy content protection and content locking · CWE-89 | Kritik9,8 | — | %78,8 | 6 Ara 2021 |
43Planlayın | CVE-2024-6028Kavram kanıtı | Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameterays-pro · quiz maker · CWE-89 | Kritik9,8 | — | %11,8 | 25 Haz 2024 |
41Planlayın | CVE-2022-1013Kavram kanıtı | Personal Dictionary < 1.3.4 - Unauthenticated SQLiays-pro · personal dictionary · CWE-89 | Kritik9,8 | — | %7,5 | 9 May 2022 |
40Planlayın | CVE-2024-10571Kavram kanıtı | Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via sourceays-pro · chartify · CWE-98 | Kritik9,8 | — | %4,8 | 14 Kas 2024 |
40Planlayın | CVE-2016-10921İstismar yok | The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.ays-pro · photo gallery · CWE-89 | Kritik9,8 | — | %1,8 | 22 Ağu 2019 |
39İzleyin | CVE-2023-22697İstismar yok | WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerabilityays-pro · survey maker · CWE-862 | Kritik9,8 | — | %0,6 | 13 Ara 2024 |
39İzleyin | CVE-2025-26971İstismar yok | WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerabilityays-pro · poll maker · CWE-89 | Kritik9,8 | — | %0,5 | 25 Şub 2025 |
39İzleyin | CVE-2025-24577İstismar yok | WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerabilityays-pro · poll maker · CWE-862 | Kritik9,8 | — | %0,4 | 17 Nis 2025 |
39İzleyin | CVE-2025-30774İstismar yok | WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerabilityays-pro · quiz maker · CWE-89 | Kritik9,8 | — | %0,4 | 1 Nis 2025 |
36İzleyin | CVE-2023-23490İstismar yok | The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parametays-pro · survey maker · CWE-89 | Yüksek8,8 | — | %2,3 | 20 Oca 2023 |
35İzleyin | CVE-2021-24457İstismar yok | Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injectionsays-pro · portfolio responsive gallery · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24461İstismar yok | FAQ Builder < 1.3.6 - Authenticated Blind SQL Injectionsays-pro · faq builder · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24460İstismar yok | Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injectionsays-pro · popup box · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24458İstismar yok | Popup box < 2.3.4 - Authenticated Blind SQL Injectionsays-pro · popup box · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24459İstismar yok | Survey Maker < 1.5.6 - Authenticated Blind SQL Injectionsays-pro · survey maker · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24463İstismar yok | Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injectionays-pro · image slider · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2021-24462İstismar yok | Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injectionsays-pro · photo gallery · CWE-89 | Yüksek8,8 | — | %1,4 | 2 Ağu 2021 |
35İzleyin | CVE-2023-39917İstismar yok | WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)ays-pro · photo gallery · CWE-352 | Yüksek8,8 | — | %0,3 | 3 Eki 2023 |
32İzleyin | CVE-2025-47545İstismar yok | WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerabilityays-pro · poll maker · CWE-362 | Yüksek8,1 | — | %0,3 | 7 May 2025 |
30İzleyin | CVE-2021-24651İstismar yok | Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injectionays-pro · poll maker · CWE-89 | Yüksek7,5 | — | %1,6 | 11 Eki 2021 |
30İzleyin | CVE-2025-10042Kavram kanıtı | Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injectionays-pro · quiz maker · CWE-89 | Yüksek7,5 | — | %0,9 | 17 Eyl 2025 |
30İzleyin | CVE-2024-10628İstismar yok | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via idays-pro · quiz maker · CWE-89 | Yüksek7,5 | — | %0,8 | 26 Oca 2025 |
30İzleyin | CVE-2024-7714Kavram kanıtı | AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Callsays-pro · chatgpt assistant · CWE-862 | Yüksek7,5 | — | %0,8 | 27 Eyl 2024 |
30İzleyin | CVE-2023-34013İstismar yok | WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)ays-pro · poll maker · CWE-918 | Yüksek7,5 | — | %0,4 | 12 Kas 2023 |
30İzleyin | CVE-2025-58015İstismar yok | WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerabilityays-pro · quiz maker · CWE-497 | Yüksek7,5 | — | %0,3 | 22 Eyl 2025 |
- CVE-2021-2493163Bu hafta
Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
KritikCVSS 9,8SilahlaştırılmışEPSS %79ays-pro · secure copy content protection and content locking6 Ara 2021
- CVE-2024-602843Planlayın
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %12ays-pro · quiz maker25 Haz 2024
- CVE-2022-101341Planlayın
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
KritikCVSS 9,8Kavram kanıtıEPSS %7ays-pro · personal dictionary9 May 2022
- CVE-2024-1057140Planlayın
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
KritikCVSS 9,8Kavram kanıtıEPSS %5ays-pro · chartify14 Kas 2024
- CVE-2016-1092140Planlayın
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
KritikCVSS 9,8İstismar yokEPSS %2ays-pro · photo gallery22 Ağu 2019
- CVE-2023-2269739İzleyin
WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %1ays-pro · survey maker13 Ara 2024
- CVE-2025-2697139İzleyin
WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0ays-pro · poll maker25 Şub 2025
- CVE-2025-2457739İzleyin
WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0ays-pro · poll maker17 Nis 2025
- CVE-2025-3077439İzleyin
WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0ays-pro · quiz maker1 Nis 2025
- CVE-2023-2349036İzleyin
The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' paramet
YüksekCVSS 8,8İstismar yokEPSS %2ays-pro · survey maker20 Oca 2023
- CVE-2021-2445735İzleyin
Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · portfolio responsive gallery2 Ağu 2021
- CVE-2021-2446135İzleyin
FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · faq builder2 Ağu 2021
- CVE-2021-2446035İzleyin
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · popup box2 Ağu 2021
- CVE-2021-2445835İzleyin
Popup box < 2.3.4 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · popup box2 Ağu 2021
- CVE-2021-2445935İzleyin
Survey Maker < 1.5.6 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · survey maker2 Ağu 2021
- CVE-2021-2446335İzleyin
Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · image slider2 Ağu 2021
- CVE-2021-2446235İzleyin
Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections
YüksekCVSS 8,8İstismar yokEPSS %1ays-pro · photo gallery2 Ağu 2021
- CVE-2023-3991735İzleyin
WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0ays-pro · photo gallery3 Eki 2023
- CVE-2025-4754532İzleyin
WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0ays-pro · poll maker7 May 2025
- CVE-2021-2465130İzleyin
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %2ays-pro · poll maker11 Eki 2021
- CVE-2025-1004230İzleyin
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %1ays-pro · quiz maker17 Eyl 2025
- CVE-2024-1062830İzleyin
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
YüksekCVSS 7,5İstismar yokEPSS %1ays-pro · quiz maker26 Oca 2025
- CVE-2024-771430İzleyin
AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls
YüksekCVSS 7,5Kavram kanıtıEPSS %1ays-pro · chatgpt assistant27 Eyl 2024
- CVE-2023-3401330İzleyin
WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)
YüksekCVSS 7,5İstismar yokEPSS %0ays-pro · poll maker12 Kas 2023
- CVE-2025-5801530İzleyin
WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0ays-pro · quiz maker22 Eyl 2025