Skip to content
OpenAdvisories

Vendor

AllAccessible

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-11643 Public exploit

    Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

    The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' function in all versions up to, and includi…