Skip to content
OpenAdvisories

Vendor

AllAccessible

2 known vulnerabilities.

Products

Accessibility by AllAccessible 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-49644

    WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through <= 1.3.4.

    AllAccessible Accessibility by AllAccessible
  • High 8.8
    CVE-2024-11643 Public exploit

    Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

    The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessible_save_settings' function in all versions up to, and includi…

    AllAccessible Accessibility by AllAccessible Web / CMS