CVE-2026-24537

Unauthenticated Cross Site Request Forgery CSRF in WP Accessibility Helper WAH = 0.6.6 versions...

PT-2026-63801

Unauthenticated Cross Site Request Forgery CSRF in WP Accessibility Helper WAH = 0.6.6 versions...

CVE-2026-2362: Improper Neutralization of Input During Web Page Generation

The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the "Long Description UI" feature in all versions up to, and including, 2.3.1. This is due to the plugin's JavaScript retrieving the alt attribute using...

EUVD-2024-29312

Malicious code in bioql PyPI...

EUVD-2024-36885

Malicious code in bioql PyPI...

EUVD-2023-46360

Malicious code in bioql PyPI...

CVE-2024-31423

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-37926

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...

CVE-2023-41869

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.4...

CVE-2023-41869

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.4...

CVE-2023-41869 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH wp-accessibility-helper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Accessibility Helper WAH: from n/a through = 0.6.2.4...

CVE-2024-37926

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...

CVE-2024-37926

CVE-2024-37926 describes a Missing Authorization vulnerability in the WordPress plugin WP Accessibility Helper (WAH) that allows accessing functionality not properly constrained by ACLs. The issue affects WAH versions from n/a up through 0.6.2.9. The initial documents do not provide a remediation...

PT-2024-27831 · WordPress · Wp Accessibility Helper

Name of the Vulnerable Software and Affected Versions: WP Accessibility Helper WAH versions 0.6.2.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that...

WordPress plugin WP Accessibility Helper 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP Accessibility Helper 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-31423

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-31423 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.5...

CVE-2024-31423

CVE-2024-31423 affects the WP Accessibility Helper (WAH) plugin for WordPress, with a Missing Authorization vulnerability present in versions up to and including 0.6.2.5. Evidence from multiple sources (WAH CVE entries and enrichment notes) confirms a Broken Access Control issue enabling unauthor...

WP Accessibility Helper (WAH) < 0.6.2.6 - Missing Authorization

Description The WP Accessibility Helper WAH plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateattachmentalt function in versions up to, and including, 0.6.2.5. This makes it possible for authenticated attackers, with...