Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Ability, Inc Clear all filters
TI-2026-19868 CVE-2026-24629 · GHSA-7x7r-hcqj-v9hx

WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessib…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0017 Published 2026-01-23 No fix listed CWE-79
TI-2025-21911 CVE-2025-30636 · GHSA-f2rm-gf2x-xx53

WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a throug…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862
TI-2025-30178 CVE-2025-47681 · GHSA-pqh4-qfjx-92pf

WordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Cross Site Request Forgery.This issue affects Web Accessibility with Max Access: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00153 Published 2025-05-07 No fix listed CWE-352
TI-2025-23715 CVE-2025-32650 · GHSA-mxwv-4fwx-8mhr

WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: fro…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00512 Published 2025-04-11 No fix listed CWE-89
TI-2025-23312 CVE-2025-32215 · GHSA-35vx-vx6v-j9x7

WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability

Priority LOW 28

Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through <= 4.18.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00225 Published 2025-04-10 No fix listed CWE-434
TI-2025-16580 CVE-2025-22698 · GHSA-h363-hgm3-pxr6

WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a throug…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00321 Published 2025-02-14 No fix listed CWE-862