Skip to content
OpenAdvisories

Vendor

Alex Volkov

8 known vulnerabilities.

Products

WP Accessibility Helper (WAH) 4 Woo Tuner 1 WAH Forms 1 WP Nice Loader 1 Chatter 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-24537

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.

    Alex Volkov WP Accessibility Helper (WAH)
  • Medium 6.5
    CVE-2025-23763

    WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0.

    Alex Volkov WAH Forms
  • Medium 5.4
    CVE-2025-23761

    WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alex Volkov Woo Tuner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woo Tuner: from n/a through 0.1.2.

    Alex Volkov Woo Tuner
  • Medium 4.3
    CVE-2023-41869

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.4.

    Alex Volkov WP Accessibility Helper (WAH)
  • Medium 5.3
    CVE-2024-37926

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.

    Alex Volkov WP Accessibility Helper (WAH)
  • Medium 4.3
    CVE-2024-31423

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.5.

    Alex Volkov WP Accessibility Helper (WAH)