Vendor
AllAccessible
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8CVE-2024-11643 Public exploit
Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update
The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' function in all versions up to, and includi…