Read the docs

Ability, Inc

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ability, Inc records in CISA KEV

No Ability, Inc vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-23715 CVE-2025-32650 · GHSA-mxwv-4fwx-8mhr

WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: fro…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00512 Published 2025-04-11 No fix listed CWE-89
TI-2025-23312 CVE-2025-32215 · GHSA-35vx-vx6v-j9x7

WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability

Priority LOW 28

Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through <= 4.18.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00225 Published 2025-04-10 No fix listed CWE-434
TI-2025-16580 CVE-2025-22698 · GHSA-h363-hgm3-pxr6

WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a throug…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00321 Published 2025-02-14 No fix listed CWE-862
TI-2026-19868 CVE-2026-24629 · GHSA-7x7r-hcqj-v9hx

WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessib…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0017 Published 2026-01-23 No fix listed CWE-79
TI-2025-21911 CVE-2025-30636 · GHSA-f2rm-gf2x-xx53

WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a throug…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862
TI-2025-30178 CVE-2025-47681 · GHSA-pqh4-qfjx-92pf

WordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Cross Site Request Forgery.This issue affects Web Accessibility with Max Access: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00153 Published 2025-05-07 No fix listed CWE-352
Open these records in search →