Read the docs

Ays Pro

Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

Ays Pro records in CISA KEV

No Ays Pro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Poll Maker 20 records MEDIUM Quiz Maker 17 records HIGH Survey Maker 16 records HIGH Popup Box 10 records MEDIUM Photo Gallery 6 records MEDIUM Secure Copy Content Protection And Content Locking 5 records HIGH Chartify 2 records MEDIUM Chatgpt Assistant 2 records HIGH

Records

5 records in Secure Copy Content Protection And Content Locking · all components

TI-2021-07210 CVE-2021-24931 · GHSA-pqpx-fr5w-2v75

Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

Priority HIGH 82

The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authentica…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.78812 Published 2021-12-06 Fixed in 2.8.2 CWE-89
TI-2024-05688 CVE-2024-6138 · GHSA-m5hx-qqjw-3xw2

Secure Copy Content Protection < 4.0.9 - Admin+ Stored XSS

Priority MEDIUM 62

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00371 Published 2024-07-11 Fixed in 4.0.9 CWE-79
TI-2024-06389 CVE-2024-6889 · GHSA-f5v6-6qcg-mrg8

Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS

Priority MEDIUM 55

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00374 Published 2024-09-04 Fixed in 4.1.7 CWE-79
TI-2024-06388 CVE-2024-6888 · GHSA-q3xw-vphm-88j4

Secure Copy Content Protection and Content Locking < 4.1.7 - Admin+ Stored XSS

Priority MEDIUM 55

The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Sc…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00399 Published 2024-09-04 Fixed in 4.1.7 CWE-79
TI-2021-06771 CVE-2021-24484 · GHSA-4mw6-mpc3-jcw5

Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections

Priority LOW 34

The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the g…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01344 Published 2021-08-02 Fixed in 2.6.7 CWE-89
Open these records in search →