Browse all 15 CVE security advisories affecting ajay. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Ajay is primarily used for web application development and API management, serving as a middleware solution for integrating various services. Historically, Ajay has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, with 14 CVEs documented to date. Security researchers have identified consistent issues in input validation and access control mechanisms. While no major public incidents have been widely reported, the accumulation of CVEs suggests potential risks in production environments requiring strict hardening and regular patching. Organizations implementing Ajay should prioritize security reviews and monitoring to mitigate identified weaknesses.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-85653 | Contextual Related Posts <= 4.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'other_attributes' Block Parameter — Contextual Related Posts CWE-79 | 6.4 | Medium | 2026-09-22 |
| CVE-2026-2986 | Contextual Related Posts <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' — Contextual Related Posts CWE-79 | 6.4 | Medium | 2026-04-18 |
| CVE-2026-32565 | WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability — Contextual Related Posts CWE-862 | 5.3 | Medium | 2026-03-18 |
| CVE-2025-47506 | WordPress Contextual Related Posts plugin <= 4.0.2 - Cross Site Scripting (XSS) Vulnerability — Contextual Related Posts CWE-79 | 6.5 | Medium | 2025-05-07 |
This page lists every published CVE security advisory associated with ajay. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.