Log in Start free

Ays Pro

Products

ProductCVEsExploitedLatest
Survey Maker15–Aug 6, 2026
Quiz Maker13–Oct 19, 2026
Secure Copy Content Protection and Content Locking10–Feb 25, 2026
Poll Maker9–Sep 22, 2025
Poll Maker – Versus Polls, Anonymous Polls, Image Polls8–Nov 13, 2025
AI ChatBot with ChatGPT and Content Generator by AYS5–Mar 2, 2026
Popup box5–Jun 26, 2026
FAQ Builder AYS4–Mar 25, 2026
Chartify4–Dec 9, 2025
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups4–Oct 16, 2026
Easy Form3–Mar 13, 2026
Photo Gallery by Ays – Responsive Image Gallery3–Sep 1, 2026
Image Slider by Ays2–Mar 25, 2026
Image Slider by Ays- Responsive Slider and Carousel2–Dec 13, 2025
Chartify – WordPress Chart Plugin2–Oct 8, 2025
Popup Like box1–Mar 13, 2026
Popup Like box – Page Plugin1–Aug 2, 2021
Portfolio Responsive Gallery1–Aug 2, 2021
Quiz Maker by AYS1–May 2, 2026
Fox LMS – WordPress LMS Plugin1–Dec 15, 2025
Advanced Related Posts1–Mar 13, 2026
Fox LMS1–Mar 13, 2026
Photo Gallery by Ays1–Sep 22, 2025
Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls1–May 29, 2026

Exploited and recent CVEs

  • CVE-2026-110379 High 7.1 WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-100159 Medium 4.8 Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers 0.3%
  • CVE-2026-76006 Medium 4.9 Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter 0.6%
  • CVE-2026-65565 High 7.1 WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57361 High 7.1 WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57631 High 7.6 WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability 0.4%
  • CVE-2026-54192 High 7.1 WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-8995 Medium 4.3 Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action 0.3%
  • CVE-2026-6817 Medium 5.8 Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' 0.2%
  • CVE-2026-32494 High 7.1 WordPress Image Slider by Ays plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25346 High 7.1 WordPress FAQ Builder AYS plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-32428 Medium 5.3 WordPress Popup Like box plugin <= 3.7.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32402 Medium 5.3 WordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32342 Medium 4.3 WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-32332 Medium 5.3 WordPress Easy Form plugin <= 2.7.9 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32329 Medium 5.3 WordPress Advanced Related Posts plugin <= 1.9.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-31922 High 8.5 WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability 0.2%
  • CVE-2026-1336 Medium 5.3 AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification 0.4%
  • CVE-2026-2367 Medium 6.4 Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute 0.2%
  • CVE-2026-26370 Medium 6.1 WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web brows 0.2%
  • CVE-2026-2384 Medium 6.4 Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2026-25338 Medium 5.3 WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-25335 Medium 4.3 WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-1320 High 7.2 Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header 0.3%
  • CVE-2026-1165 Medium 4.3 Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change 0.2%
  • CVE-2025-69021 Medium 5.4 WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-66117 High 7.5 WordPress Easy Form plugin <= 2.7.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-14156 Critical 9.8 Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder' 6.8%
  • CVE-2025-14454 Medium 4.3 Image Slider by Ays- Responsive Slider and Carousel <= 2.7.0 - Cross-Site Request Forgery to Arbitrary Slider Deletion 0.2%
  • CVE-2025-14159 Medium 4.3 Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export 0.2%