AllAccessible

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

AllAccessible records in CISA KEV

No AllAccessible vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-33130 CVE-2024-49644 · GHSA-c3v4-qwrh-x627

WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

HIGH 77

Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through <= 1.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00418 Published 2025-01-07 No fix listed CWE-266

TI-2024-10789 CVE-2024-11643 · GHSA-52hr-mg3h-r5h9

Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

MEDIUM 41

The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' func…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00715 Published 2024-12-04 No fix listed CWE-862

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0