Skip to content
OpenAdvisories

Vendor

Ability

6 known vulnerabilities.

Products

Accessibility Suite 4 Web Accessibility with Max Access 2
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-24629

    WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through…

    Ability Web Accessibility with Max Access
  • Medium 5.4
    CVE-2025-30636

    WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through <= 4.19.

    Ability Accessibility Suite
  • Medium 4.3
    CVE-2025-47681

    WordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Cross Site Request Forgery.This issue affects Web Accessibility with Max Access: from n/a through <= 2.0.9.

    Ability Web Accessibility with Max Access
  • Medium 6.5
    CVE-2025-32215

    WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through <= 4.18.

    Ability Accessibility Suite
  • Medium 6.3
    CVE-2025-22698

    WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability

    Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through <= 4.18.

    Ability Accessibility Suite