WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
awsom-news-announcement
Published
2024-05-06
Title
AWSOM News Announcement <= 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
awstats-script
Published
2025-08-17
Title
AWStats Script <= 0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
axeptio-sdk-integration
Published
2024-12-11
Title
Axeptio < 2.5.5 - Unauthenticated Local File Inclusion
Slug
axima-payment-gateway
Published
2025-05-07
Title
Pays – WooCommerce Payment Gateway < 2.7 - Cross-Site Request Forgery
Slug
axle-demo-importer
Published
2025-05-20
Title
Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload
Slug
ayecode-connect
Published
2024-12-30
Title
AyeCode Connect < 1.3.9 - Missing Authorization
Slug
ayo-shortcodes
Published
2025-12-11
Title
Ayo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls
Slug
ays-chatgpt-assistant
Published
2025-10-11
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.6.7 - Unauthenticated Information Exposure
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Missing Authorization to Unauthenticated Media File Uploads
Slug
ays-chatgpt-assistant
Published
2026-03-02
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.6 - Missing Authorization to Unauthenticated API Key Modification
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-facebook-popup-likebox
Published
2022-03-07
Title
Popup Like box < 3.6.1 - Reflected Cross-Site Scripting
Slug
ays-facebook-popup-likebox
Published
2024-04-10
Title
Popup Like box – Page < 3.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ays-popup-box
Published
2021-06-29
Title
Popup box < 2.3.4 - Authenticated Blind SQL Injections
Slug
ays-popup-box
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-popup-box
Published
2023-03-08
Title
Popup box < 3.4.5 - Reflected XSS
Slug
ays-popup-box
Published
2023-08-29
Title
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
Slug
ays-popup-box
Published
2023-10-27
Title
Popup Box < 3.7.9 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 7.9.0 - Admin+ Stored XSS