CVE-2024-31423

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-31423

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

WP Accessibility Helper (WAH) < 0.6.2.6 - Missing Authorization

Description The WP Accessibility Helper WAH plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateattachmentalt function in versions up to, and including, 0.6.2.5. This makes it possible for authenticated attackers, with...

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Accessibility Helper WAH versions = 0.6.2.5...