Ays Pro

Records146All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

Ays Pro records in CISA KEV

No Ays Pro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Poll Maker 20 records MEDIUM Quiz Maker 17 records HIGH Survey Maker 16 records HIGH Popup Box 10 records MEDIUM Photo Gallery 6 records MEDIUM Secure Copy Content Protection And Content Locking 5 records HIGH Chartify 2 records MEDIUM Chatgpt Assistant 2 records HIGH

Records

6 records in Photo Gallery · all components

TI-2023-02400 CVE-2023-2568 · GHSA-m7j5-3qqf-3ccj

Photo Gallery by Ays < 5.1.7 - Reflected XSS

MEDIUM 60

The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users s…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-06-12 Fixed in 5.1.7

TI-2016-08959 CVE-2016-10921 · GHSA-pfcg-rjvr-ggqm

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

MEDIUM 46

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01815 Published 2019-08-22 No fix listed CWE-89

TI-2021-06751 CVE-2021-24462 · GHSA-g2fm-f89j-pxh3

Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections

MEDIUM 41

The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in S…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01362 Published 2021-08-02 Fixed in 4.4.4 CWE-89

TI-2023-20816 CVE-2023-39917 · GHSA-c994-hpx9-c8x4

WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-03 No fix listed CWE-352

TI-2023-15410 CVE-2023-32107 · GHSA-4fpp-3mjc-8348

WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00399 Published 2023-08-18 No fix listed CWE-79

TI-2024-24946 CVE-2024-37442 · GHSA-2grw-cv7g-wxwm

WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability

LOW 25

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: f…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00354 Published 2024-07-09 Fixed in 5.7.1 CWE-74

Open these records in search →