Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-37926 EUVD-2024-36885GHSA-jcr7-h23v-qphc

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.

Affected products

VendorProductAffectedFixed
Alex Volkov WP Accessibility Helper (WAH) ≤ 0.6.2.9 —

References