Vulnerabilities

TI-2024-33130 CVE-2024-49644 · GHSA-c3v4-qwrh-x627

WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

HIGH 77

Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through <= 1.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00418 Published 2025-01-07 No fix listed CWE-266

TI-2024-10789 CVE-2024-11643 · GHSA-52hr-mg3h-r5h9

Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

MEDIUM 41

The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' func…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00715 Published 2024-12-04 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update