Skip to content
OpenAdvisories

Vendor

accessibewp

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

    The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the `accessibe_render_js_in_footer()` function logging the complete plugin options array to the …

  • Medium 4.3

    Web Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery

    The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10. This is due to missing nonce validation on multiple AJAX actions including accessibe_signup, accessibe_login, acces…