← Back

Ays Pro

ays-pro

84 CVEs • 14 products

Products (14)

Click to collapse
Toggle
Poll Maker
poll_maker
20 CVEs
Quiz Maker
quiz_maker
17 CVEs
Survey Maker
survey_maker
16 CVEs
Popup Box
popup_box
10 CVEs
Photo Gallery
photo_gallery
6 CVEs
Secure Copy Content Protection And Content Locking
secure_copy_content_protection_and_content_locking
5 CVEs
Chartify
chartify
2 CVEs
Chatgpt Assistant
chatgpt_assistant
2 CVEs
Portfolio Responsive Gallery
portfolio_responsive_gallery
1 CVE
Faq Builder
faq_builder
1 CVE
Image Slider
image_slider
1 CVE
Popup Like Box
popup_like_box
1 CVE
Personal Dictionary
personal_dictionary
1 CVE
Easy Form
easy_form
1 CVE

CVEs (84)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24458
1Ays Pro
1Popup Box
Nov 21, 2024
Aug 2, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_res...Show more
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboardShow less
CVE-2021-24457
1Ays Pro
1Portfolio Responsive Gallery
Nov 21, 2024
Aug 2, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Ga...Show more
The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboardShow less
CVE-2021-24456
1Ays Pro
1Quiz Maker
Nov 21, 2024
Aug 2, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
CVE-2016-10921
1Ays Pro
1Photo Gallery
Nov 21, 2024
Aug 22, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.