Description
Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alex Volkov | WP Accessibility Helper (WAH) | ≤ 0.6.6 | — |
Medium · 4.3
CVE-2026-24537
EUVD-2026-48143GHSA-92gw-vp7j-x89j
WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack