Threat database

50 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-110379Quiz Maker · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Quiz… High7.1EPSS 0.2%2026-10-19CVE Database V5CVE-2026-110379 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91. EPSS 0.2%Vulnerability Ays Pro	CVE Database V5	2026-10-19
High	7.1	EPSS 0.3%	CVE-2026-65565Survey Maker · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-65565 CVE-2026-65565 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability affecting Ays Pro Survey Maker versions up to and including 5.2.3.3. This vulnerability allows an attacker to inject malicious scripts during web page generation, potentially impacting confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance has been provided yet. EPSS 0.3%Vulnerability Ays Pro #cwe-79 #ghsa-g4gq-cg7r-jrv8	CVE Database V5	2026-08-06
High	7.1	EPSS 0.3%	CVE-2026-57361Survey Maker · Cross-site Scripting High7.1EPSS 0.3%2026-07-02CVE Database V5CVE-2026-57361 Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions. EPSS 0.3%Vulnerability Ays Pro #cwe-79	CVE Database V5	2026-07-02
High	7.6	EPSS 0.4%	CVE-2026-57631Popup box · SQL Injection High7.6EPSS 0.4%2026-06-26CVE Database V5CVE-2026-57631 Administrator SQL Injection in Popup box <= 6.0.1 versions. EPSS 0.4%Vulnerability Ays Pro #cwe-89	CVE Database V5	2026-06-26
High	7.1	EPSS 0.3%	CVE-2026-54192Popup box · Cross-site Scripting High7.1EPSS 0.3%2026-06-17CVE Database V5CVE-2026-54192 Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. EPSS 0.3%Vulnerability Ays Pro #cwe-79	CVE Database V5	2026-06-17
High	7.1	EPSS 0.3%	CVE-2026-32494Image Slider by Ays · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro Image… High7.1EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32494 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n/a through <= 2.7.1. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-03-25
High	7.1	EPSS 0.2%	CVE-2026-25346FAQ Builder AYS · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Ays Pro FAQ… High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-25346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAQ Builder AYS: from n/a through <= 1.8.2. EPSS 0.2%Vulnerability Ays Pro	CVE Database V5	2026-03-25
Medium	5.3	EPSS 0.3%	CVE-2026-32428Popup Like box · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32428 Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Like box: from n/a through <= 3.7.7. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.3%	CVE-2026-32402Image Slider by Ays · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32402 Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n/a through <= 2.7.1. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-03-13
Medium	4.3	EPSS 0.1%	CVE-2026-32342Quiz Maker · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2026-03-13CVE Database V5CVE-2026-32342 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.1.2. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.3%	CVE-2026-32332Easy Form · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32332 Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through <= 2.7.9. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.3%	CVE-2026-32329Advanced Related Posts · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32329 Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Related Posts: from n/a through <= 1.9.1. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-03-13
High	8.5	EPSS 0.4%	CVE-2026-31922Fox LMS · SQL Injection High8.5EPSS 0.4%2026-03-13CVE Database V5CVE-2026-31922 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fox-lms allows Blind SQL Injection.This issue affects Fox LMS: from n/a through <= 1.0.6.3. EPSS 0.4%Vulnerability Ays Pro	CVE Database V5	2026-03-13
Medium	6.1	EPSS 0.3%	CVE-2026-26370Survey Maker · Cross-site scripting (XSS) Medium6.1EPSS 0.3%2026-02-20CVE Database V5CVE-2026-26370 WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-02-20
Medium	5.3	EPSS 0.2%	CVE-2026-25338AI ChatBot with ChatGPT and Content Generator by AYS · Missing Authorization Medium5.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25338 Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.7.4. EPSS 0.2%Vulnerability Ays Pro	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.3%	CVE-2026-25335Secure Copy Content Protection and Content Locking · Missing Authorization Medium4.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25335 Missing Authorization vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Secure Copy Content Protection and Content Locking: from n/a through <= 5.0.0. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2026-02-19
Medium	5.4	EPSS 0.1%	CVE-2025-69021Popup box · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2025-12-30CVE Database V5CVE-2025-69021 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.This issue affects Popup box: from n/a through <= 6.0.7. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2025-12-30
High	7.5	EPSS 0.3%	CVE-2025-66117Easy Form · Missing Authorization High7.5EPSS 0.3%2025-12-18CVE Database V5CVE-2025-66117 Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through <= 2.7.8. EPSS 0.3%Vulnerability Ays Pro	CVE Database V5	2025-12-18
Medium	4.3	EPSS 0.1%	CVE-2025-67595Quiz Maker · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-09CVE Database V5CVE-2025-67595 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.0.82. EPSS 0.1%Vulnerability Ays Pro	CVE Database V5	2025-12-09
Medium	4.3	EPSS 0.2%	CVE-2025-66529Chartify · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-12-09CVE Database V5CVE-2025-66529 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.6.3. EPSS 0.2%Vulnerability Ays Pro #cwe-352	CVE Database V5	2025-12-09

Showing 1–20 of 50 results