Ays Pro · weakness class
SQL Injection
25 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 3
Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.
- WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection
- Quiz Maker <= 6.5.8.3 - SQL Injection
- WordPress Personal Dictionary <1.3.4 - Blind SQL Injection
- The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' act…
- The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
- Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
- Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
- Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
- Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
- Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections
- FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections
- Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
- Survey Maker < 1.5.6 - Authenticated Blind SQL Injections
- Popup box < 2.3.4 - Authenticated Blind SQL Injections
- Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
- Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
- Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
- WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection
- Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter
- Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
- WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability
- WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability
- WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability
- Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
- WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.