PT-2025-44231 · Unknown · Ays Pro Popup Box

Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-57931

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ays Pro Popup box versions through 5.5.4

Description A Cross-Site Request Forgery (CSRF) issue exists in Ays Pro Popup box, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient protection against CSRF attacks.

Recommendations Update Ays Pro Popup box to a version later than 5.5.4.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-57931

Affected Products

Ays Pro Popup Box

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-57931 · Security Note
• https://patchstack.com/database/wordpress/plugin/ays-popup-box/security-policy/vdp/vulnerability/wordpress-popup-box-plugin-5-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/36012 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/ays-popup-box/vulnerability/wordpress-popup-box-plugin-5-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/ays-popup-box/security-policy/vdp/vulnerability/wordpress-popup-box-plugin-5-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note