Skip to content

Known vulnerabilities in Ays Pro Popup box

Is your version affected?

CVE Summary Score Published
CVE-2026-57631 Administrator SQL Injection in Popup box <= 6.0.1 versions 7.6 High Jun 26, 2026
CVE-2026-54192 Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions 7.1 High Jun 17, 2026
CVE-2025-69021 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request… 5.4 Medium Dec 30, 2025
CVE-2025-57931 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request… 5.3 Medium Oct 29, 2025
CVE-2021-24458 The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use… Not rated Aug 2, 2021

Other Ays Pro products