Skip to content

Ays Pro · weakness class

SQL Injection

25 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
3

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

  1. WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL InjectionCVE-2021-24931Ays-Pro · 79% likely

    CWE-89

  2. Quiz Maker <= 6.5.8.3 - SQL InjectionCVE-2024-6028ays-pro · CVSS 9.8 · 12% likely

    CWE-89

  3. WordPress Personal Dictionary <1.3.4 - Blind SQL InjectionCVE-2022-1013Ays-Pro · 7.5% likely

    CWE-89

  4. The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' act…CVE-2023-23490Ays-Pro · CVSS 8.8 · 2.4% likely

    CWE-89

  5. The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.CVE-2016-10921Ays-Pro · 1.8% likely

    CWE-89

  6. Poll Maker < 3.4.2 - Unauthenticated Time Based SQL InjectionCVE-2021-24651Ays-Pro · 1.6% likely

    CWE-89

  7. Poll Maker < 3.2.1 - Authenticated Blind SQL InjectionsCVE-2021-24483Ays Pro · 1.4% likely

    CWE-89

  8. Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL InjectionsCVE-2021-24457Ays Pro · 1.4% likely

    CWE-89

  9. Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL InjectionCVE-2021-24463Ays Pro · 1.4% likely

    CWE-89

  10. Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL InjectionsCVE-2021-24462Ays Pro · 1.4% likely

    CWE-89

  11. FAQ Builder < 1.3.6 - Authenticated Blind SQL InjectionsCVE-2021-24461Ays Pro · 1.4% likely

    CWE-89

  12. Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL InjectionsCVE-2021-24460Ays Pro · 1.4% likely

    CWE-89

  13. Survey Maker < 1.5.6 - Authenticated Blind SQL InjectionsCVE-2021-24459Ays Pro · 1.4% likely

    CWE-89

  14. Popup box < 2.3.4 - Authenticated Blind SQL InjectionsCVE-2021-24458Ays Pro · 1.4% likely

    CWE-89

  15. Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL InjectionsCVE-2021-24484Ays Pro · 1.3% likely

    CWE-89

  16. Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL InjectionsCVE-2021-24456Ays Pro · 1.3% likely

    CWE-89

  17. Quiz Maker <= 6.7.0.56 - Unauthenticated SQL InjectionCVE-2025-10042ays-pro · CVSS 5.9 · 0.9% likely

    CWE-89

  18. WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL InjectionCVE-2024-9874ays-pro · CVSS 4.9 · 0.7% likely

    CWE-89

  19. Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' ParameterCVE-2026-76006ays-pro · CVSS 4.9 · 0.6% likely

    CWE-89

  20. Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by ParameterCVE-2024-9475ays-pro · CVSS 4.9 · 0.5% likely

    CWE-89

  21. WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerabilityCVE-2025-26971Ays Pro · CVSS 7.6 · 0.5% likely

    CWE-89

  22. WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerabilityCVE-2025-30774Ays Pro · CVSS 8.2 · 0.4% likely

    CWE-89

  23. WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerabilityCVE-2026-57631Ays Pro · CVSS 7.6 · 0.4% likely

    CWE-89

  24. Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` ParameterCVE-2025-12620ays-pro · CVSS 4.9 · 0.3% likely

    CWE-89

  25. WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerabilityCVE-2026-31922Ays Pro · CVSS 8.5 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.