ays-pro has 1 CVE on record. The median CVSS is 5.4 (medium).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.4
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

CWE-918 1

Products

popup_box 1

Follow ays-pro:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2025-15611Medium· 5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated attackers to perform Cross-Site Request Forgery attacks30

ays-pro vulnerabilities

CVEs affecting ays-pro, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2025-15611Medium· 5.4

The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated attackers to perform Cross-Site Request Forgery attacks

The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated attackers to perform Cross-Site Request Forgery attacks. When an aut…

▾ Sunlitays-pro · popup_boxEPSS 0.14%via NVD

ays-pro vulnerabilities (CVEs) · VulnSea