Advisories · Technology

Ays Pro Popup box.

Every CVE that names Ays Pro Popup box among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57631 CVE record

CVSS 7.6 High

WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability
- Ays Pro Popup box
- SQL injection
Not analysed yet 26 Jun 2026
CVE-2026-54192 CVE record

CVSS 7.1 High

WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
- Ays Pro Popup box
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2026
CVE-2025-69021 CVE record

CVSS 5.4 Medium

WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
- Ays Pro Popup box
- Cross-site request forgery (CSRF)
Not analysed yet 30 Dec 2025
CVE-2025-57931 CVE record

CVSS 5.3 Medium

WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability
- Ays Pro Popup box
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2025
CVE-2021-24458 CVE record

Popup box < 2.3.4 - Authenticated Blind SQL Injections
- Ays Pro Popup box
- SQL injection
Not analysed yet 2 Aug 2021