WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ayo-shortcodes
Published
2025-12-11
Title
Ayo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure
Slug
ays-chatgpt-assistant
Published
2024-09-05
Title
AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls
Slug
ays-chatgpt-assistant
Published
2025-10-11
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.6.7 - Unauthenticated Information Exposure
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
Slug
ays-chatgpt-assistant
Published
2025-11-26
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.1 - Missing Authorization to Unauthenticated Media File Uploads
Slug
ays-chatgpt-assistant
Published
2026-03-02
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.6 - Missing Authorization to Unauthenticated API Key Modification
Slug
ays-chatgpt-assistant
Published
2026-02-08
Title
AI ChatBot with ChatGPT and Content Generator by AYS < 2.7.5 - Missing Authorization
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
Slug
ays-facebook-popup-likebox
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-facebook-popup-likebox
Published
2022-03-07
Title
Popup Like box < 3.6.1 - Reflected Cross-Site Scripting
Slug
ays-facebook-popup-likebox
Published
2024-04-10
Title
Popup Like box – Page < 3.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ays-facebook-popup-likebox
Published
2026-03-01
Title
Popup Like box < 3.7.8 - Missing Authorization
Slug
ays-popup-box
Published
2021-06-29
Title
Popup box < 2.3.4 - Authenticated Blind SQL Injections
Slug
ays-popup-box
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
ays-popup-box
Published
2023-03-08
Title
Popup box < 3.4.5 - Reflected XSS
Slug
ays-popup-box
Published
2023-08-29
Title
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
Slug
ays-popup-box
Published
2023-10-27
Title
Popup Box < 3.7.9 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
Slug
ays-popup-box
Published
2023-11-13
Title
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 7.9.0 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-01-22
Title
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
Slug
ays-popup-box
Published
2024-04-24
Title
Popup Box – Best WordPress Popup Plugin < 4.3.7 - Missing Authorization to Information Exposure
Slug
ays-popup-box
Published
2024-05-03
Title
Popup box < 4.1.3 - Cross-Site Request Forgery
Slug
ays-popup-box
Published
2024-06-20
Title
Popup box < 4.5.2 - Missing Authorization