WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ays-popup-box
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-popup-box
Published
2023-03-08
Title
Popup box < 3.4.5 - Reflected XSS
Slug
ays-popup-box
Published
2023-08-29
Title
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
Slug
ays-popup-box
Published
2023-10-27
Title
Popup Box < 3.7.9 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 7.9.0 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-04-24
Title
Popup Box – Best WordPress Popup Plugin < 4.3.7 - Missing Authorization to Information Exposure
Slug
ays-popup-box
Published
2024-05-03
Title
Popup box < 4.1.3 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2024-06-20
Title
Popup box < 4.5.2 - Missing Authorization
Slug
ays-popup-box
Published
2024-09-03
Title
Popup Box < 4.7.8 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-11-15
Title
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 4.9.8 - Missing Authorization to Unauthenticated Limited Options Update
Slug
ays-popup-box
Published
2025-10-29
Title
Popup box < 5.5.5 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2025-12-28
Title
Popup box < 6.0.8 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2026-01-30
Title
Popup Box < 6.1.2 - Cross-Site Request Forgery to Popup Status Change
Slug
ays-popup-box
Published
2026-03-17
Title
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
Slug
ays-popup-box
Published
2026-06-16
Title
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 6.3.0 - Reflected Cross-Site Scripting
Slug
ays-popup-box
Published
2026-06-26
Title
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 6.0.2 - Authenticated (Administrator+) SQL Injection
Slug
ays-slider
Published
2021-06-29
Title
Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
Slug
ays-slider
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-slider
Published
2025-12-12
Title
Image Slider by Ays- Responsive Slider and Carousel < 2.7.1 - Cross-Site Request Forgery to Arbitrary Slider Deletion
Slug
ays-slider
Published
2026-03-20
Title
Image Slider by Ays- Responsive Slider and Carousel < 2.7.2 - Unauthenticated Stored Cross-Site Scripting
Slug
ays-slider
Published
2026-02-21
Title
Image Slider by Ays < 2.7.2 - Missing Authorization
Slug
ayyash-studio
Published
2025-03-25
Title
Ayyash Studio <= 1.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload