Medium · 4.3 CVE-2025-64246 EUVD-2025-203604GHSA-38mm-37q5-m94p

WordPress Accessibility by AudioEye plugin <= 1.0.49 - Broken Access Control vulnerability

Published Dec 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: netopsae Product: Accessibility by AudioEye

Description

Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility by AudioEye: from n/a through <= 1.0.49.

Affected products

Vendor	Product	Affected	Fixed
netopsae	Accessibility by AudioEye	≤ 1.0.49	—

References

https://patchstack.com/database/Wordpress/Plugin/accessibility-by-audioeye/vulnerability/wordpress-accessibility-by-audioeye-plugin-1-0-49-broken-access-control-vulnerability?_s_id=cve vdb-entry