Threat database

50 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2025-64276Survey Maker · Missing Authorization Medium6.5EPSS 0.3%2025-11-13CVE Database V5CVE-2025-64276 Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through <= 5.1.9.4. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-11-13
High	7.5	EPSS 1.3%	CVE-2025-62039AI ChatBot with ChatGPT and Content Generator by AYS · Insertion of Sensitive Information Into Sent Data High7.5EPSS 1.3%2025-11-06CVE Database V5CVE-2025-62039 Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6. EPSS 1.3%Vulnerability Ays Pro	CVE Database V5	2025-11-06
Medium	5.3	EPSS 0.1%	CVE-2025-57931Popup box · Cross-Site Request Forgery (CSRF) Medium5.3EPSS 0.1%2025-10-29CVE Database V5CVE-2025-57931 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.This issue affects Popup box: from n/a through <= 5.5.4. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2025-10-29
High	7.1	EPSS 0.2%	CVE-2025-48098Survey Maker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Survey… High7.1EPSS 0.2%2025-10-22CVE Database V5CVE-2025-48098 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8. EPSS 0.2%Vulnerability Ays Pro	CVE Database V5	2025-10-22
Medium	5.9	EPSS 0.3%	CVE-2025-48095Survey Maker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Survey… Medium5.9EPSS 0.3%2025-10-22CVE Database V5CVE-2025-48095 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.3%	CVE-2025-57947Photo Gallery by Ays · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Photo… Medium6.5EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57947 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Photo Gallery by Ays gallery-photo-gallery allows DOM-Based XSS.This issue affects Photo Gallery by Ays: from n/a through <= 6.3.8. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.3%	CVE-2025-57954Poll Maker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Poll… Medium6.5EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57954 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Poll Maker poll-maker allows DOM-Based XSS.This issue affects Poll Maker: from n/a through <= 6.0.2. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-09-22
Medium	4.3	EPSS 0.1%	CVE-2025-58014Quiz Maker · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-09-22CVE Database V5CVE-2025-58014 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.0.64. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2025-09-22
Medium	5.3	EPSS 0.3%	CVE-2025-58015Quiz Maker · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58015 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Ays Pro Quiz Maker quiz-maker allows Retrieve Embedded Sensitive Data.This issue affects Quiz Maker: from n/a through <= 6.7.0.65. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-09-22
Medium	4.3	EPSS 0.1%	CVE-2025-54673Chartify · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-08-14CVE Database V5CVE-2025-54673 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.5.3. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.4%	CVE-2025-24577Poll Maker · Missing Authorization Medium6.5EPSS 0.4%2025-04-17CVE Database V5CVE-2025-24577 Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 5.5.0. EPSS 0.4%Vulnerability Ays Pro	CVE Database V5	2025-04-17
High	7.1	EPSS 0.3%	CVE-2025-27285Easy Form · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Easy… High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-27285 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Easy Form easy-form allows Reflected XSS.This issue affects Easy Form: from n/a through <= 2.6.9. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-04-17
Medium	4.3	EPSS 0.3%	CVE-2025-32275Survey Maker · Authentication Bypass by Spoofing Medium4.3EPSS 0.3%2025-04-10CVE Database V5CVE-2025-32275 Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through <= 5.1.6.3. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-04-10
Medium	5.9	EPSS 0.4%	CVE-2025-32133Secure Copy Content Protection and Content Locking · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Secure… Medium5.9EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32133 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.5.5. EPSS 0.4%Vulnerability Ays Pro	CVE Database V5	2025-04-04
High	7.1	EPSS 0.4%	CVE-2025-30905Secure Copy Content Protection and Content Locking · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Secure… High7.1EPSS 0.4%2025-04-01CVE Database V5CVE-2025-30905 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 4.4.3. EPSS 0.4%Vulnerability Ays Pro	CVE Database V5	2025-04-01
High	8.2	EPSS 0.4%	CVE-2025-30774Quiz Maker · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ays Pro Quiz… High8.2EPSS 0.4%2025-04-01CVE Database V5CVE-2025-30774 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through <= 6.6.8.7. EPSS 0.4%Vulnerability Ays Pro	CVE Database V5	2025-04-01
Medium	5.9	EPSS 0.3%	CVE-2025-30904Chartify · Cross-site Scripting Medium5.9EPSS 0.3%2025-03-27CVE Database V5CVE-2025-30904 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify chart-builder allows Stored XSS.This issue affects Chartify: from n/a through <= 3.1.7. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-03-27
High	7.6	EPSS 0.5%	CVE-2025-26971Poll Maker · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ays Pro Poll… High7.6EPSS 0.5%2025-02-25CVE Database V5CVE-2025-26971 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through <= 5.6.5. EPSS 0.5%Vulnerability Ays Pro	CVE Database V5	2025-02-25
Medium	5.9	EPSS 0.2%	CVE-2025-22664Survey Maker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Survey… Medium5.9EPSS 0.2%2025-02-04CVE Database V5CVE-2025-22664 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.3.5. EPSS 0.2%Vulnerability Ays Pro	CVE Database V5	2025-02-04
High	7.3	EPSS 0.5%	CVE-2024-10633Quiz Maker Developer · Eval Injection High7.3EPSS 0.5%2025-01-26CVE Database V5CVE-2024-10633 The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency). This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. EPSS 0.5%Vulnerability AYS Pro Plugins #cwe-95	CVE Database V5	2025-01-26

Showing 21–40 of 50 results