WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-04-24
Title
Popup Box – Best WordPress Popup Plugin < 4.3.7 - Missing Authorization to Information Exposure
Slug
ays-popup-box
Published
2024-05-03
Title
Popup box < 4.1.3 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2024-06-20
Title
Popup box < 4.5.2 - Missing Authorization
Slug
ays-popup-box
Published
2024-09-03
Title
Popup Box < 4.7.8 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-11-15
Title
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 4.9.8 - Missing Authorization to Unauthenticated Limited Options Update
Slug
ays-popup-box
Published
2025-10-29
Title
Popup box < 5.5.5 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2025-12-28
Title
Popup box < 6.0.8 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2026-01-30
Title
Popup Box < 6.1.2 - Cross-Site Request Forgery to Popup Status Change
Slug
ays-popup-box
Published
2026-03-17
Title
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
Slug
ays-slider
Published
2021-06-29
Title
Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
Slug
ays-slider
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-slider
Published
2025-12-12
Title
Image Slider by Ays- Responsive Slider and Carousel < 2.7.1 - Cross-Site Request Forgery to Arbitrary Slider Deletion
Slug
ayyash-studio
Published
2025-03-25
Title
Ayyash Studio <= 1.0.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
az-content-finder
Published
2025-01-17
Title
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
Slug
azan
Published
2024-05-24
Title
AZAN Plugin <= 0.6 - Stored XSS via CSRF
Slug
azindex
Published
2024-08-19
Title
AZIndex <= 0.8.1 - Index Deletion via CSRF
Slug
azindex
Published
2024-08-19
Title
AZIndex <= 0.8.1 - Stored XSS via CSRF
Slug
azon-addon-js-composer
Published
2025-07-07
Title
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Authenticated (Subscriber+) SQL Injection
Slug
azon-addon-js-composer
Published
2025-07-17
Title
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Reflected Cross-Site Scripting
Slug
azonbox
Published
2024-11-08
Title
AzonBox <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
azurecurve-bbcode
Published
2025-09-10
Title
azurecurve BBCode <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Shortcode
Slug
azurecurve-floating-featured-image
Published
2025-01-16
Title
azurecurve Floating Featured <= 2.2.0 - Reflected Cross-Site Scripting
Slug
azurecurve-shortcodes-in-comments
Published
2025-04-09
Title
azurecurve Shortcodes in Comments <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
azurecurve-toggle-showhide
Published
2024-08-26
Title
azurecurve Toggle Show/Hide <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting