Vulnerabilities

TI-2026-19777 CVE-2026-24537 · GHSA-92gw-vp7j-x89j

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00142 Published 2026-07-23 No fix listed CWE-352

TI-2025-17530 CVE-2025-23763 · GHSA-jhx5-m34v-c9rc

WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

LOW 30

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0054 Published 2025-03-03 No fix listed CWE-862

TI-2025-17528 CVE-2025-23761 · GHSA-6ghr-rv22-97x3

WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Alex Volkov Woo Tuner allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00475 Published 2025-01-16 No fix listed CWE-862

TI-2025-17527 CVE-2025-23760 · GHSA-wp83-cgjg-gj2f

WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Volkov Chatter allows Stored XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00429 Published 2025-01-16 No fix listed CWE-79

TI-2024-37202 CVE-2024-56232 · GHSA-5jph-hg2x-m54g

WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Alex Volkov WP Nice Loader wp-nice-loader allows Stored XSS.This issue affects WP Nice Loader: from n/a through <= 0.1.0.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00159 Published 2024-12-31 No fix listed CWE-352

TI-2023-22262 CVE-2023-41869 · GHSA-j26j-8pq8-x582

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

LOW 21

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper (WAH): from n/a through…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00499 Published 2024-12-13 No fix listed CWE-862

TI-2024-25232 CVE-2024-37926 · GHSA-jcr7-h23v-qphc

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-11-01 No fix listed CWE-862

Vulnerabilities

Filters

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability

WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability