Vulnerabilities

TI-2024-05548 CVE-2024-5987 · GHSA-6qr3-hrff-mm2p

WP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update

LOW 24

The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_contrast_variations' and 'save_empty_contrast_variations' functions…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00264 Published 2024-08-29 No fix listed CWE-862

TI-2024-20792 CVE-2024-31423 · GHSA-f44g-xj93-9xvh

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-09 No fix listed CWE-862

Vulnerabilities

Filters

WP Accessibility Helper <= 0.6.2.8 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability