Pricing
Case studies
Login
Start trial
Poll Maker
Ays Pro
Developer
6.3.0
Latest version
7,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
22 patched
8 Mitigation rules
Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter vulnerability
<= 6.0.7
12/11/2025
Cross Site Scripting (XSS) Vulnerability
<= 6.0.2
22/09/2025
Unauthenticated Basic Information Exposure vulnerability
<= 5.8.9
15/08/2025
Race Condition Vulnerability
<= 5.7.7
07/05/2025
Admin+ Stored XSS vulnerability
< 5.5.4
18/03/2025
SQL Injection vulnerability
<= 5.6.5
23/02/2025
Broken Access Control vulnerability
<= 5.5.6
03/01/2025
HTML Injection vulnerability
< 5.5.5
03/01/2025
Broken Access Control vulnerability
<= 5.5.0
15/12/2024
Cross-Site Request Forgery to Poll Duplication vulnerability
<= 5.5.4
06/12/2024
Authenticated (Administrator+) Time-Based SQL Injection vulnerability
<= 5.4.6
08/11/2024
Authenticated (Administrator+) SQL Injection vulnerability
<= 5.4.6
25/10/2024
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
<= 5.4.6
25/10/2024
Missing Authorization to Unauthenticated Email Enumeration vulnerability
<= 5.1.8
19/04/2024
Missing Authorization to Unauthenticated Stored Cross-Site Scripting vulnerability
<= 5.1.8
19/04/2024
Broken Access Control vulnerability
<= 4.8.0
26/12/2023
Broken Access Control vulnerability
<= 4.7.1
12/10/2023
Reflected Cross Site Scripting (XSS) vulnerability
<= 4.7.0
05/09/2023
Server Side Request Forgery (SSRF) vulnerability
<= 4.6.2
26/06/2023
Unauthenticated Time-Based SQL Injection (SQLi) vulnerability
<= 3.4.1
13/09/2021
Reflected Cross-Site Scripting (XSS) vulnerability
<= 3.2.8
26/07/2021
Authenticated Blind SQL Injection (SQLi) vulnerability
<= 3.2.0
29/06/2021