Vendor

    Ajay

    16 known vulnerabilities in products by Ajay, 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ajay
    MediumCVE-2026-85653

    Ajay Contextual Related Posts: Cross-site Scripting

    		6.4
    MediumCVE-2026-110290

    Ajay WebberZone Top 10: Cross-site Scripting

    		6.4
    HighCVE-2021-4373

    Better Search <= 2.5.2 - Cross-Site Request Forgery to Settings Import

    also in 1 other product

    		8.8
    MediumCVE-2026-2986

    Ajay Contextual Related Posts: Cross-site Scripting

    		6.4
    MediumCVE-2025-47506

    WordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2026-24938

    WordPress Better Search plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-47509

    WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-47507

    WordPress Better Search plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-4171

    Ajay WZ Followed Posts: Cross-site Scripting

    		6.4
    MediumCVE-2025-5533

    Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2026-32565

    WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-31874

    WordPress WebberZone Snippetz plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2020-36761

    Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3
    MediumCVE-2024-51677

    WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2025-7431

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    		4.4
    MediumCVE-2021-4400

    Better Search <= 2.5.2 - Cross-Site Request Forgery Bypass

    also in 1 other product

    		4.3

    Products

    Products by Ajay
    Contextual Related Posts40
    Knowledge Base30