Skip to content
OpenAdvisories

Product · uPress

Enable Accessibility

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1

    Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting

    The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for un…

  • Medium 4.3

    WordPress Enable Accessibility Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions.