Lucene search
K

14 matches found

CNVD
CNVD
added 2026/03/02 12:0 a.m.2 views

WordPress Plugin Web Accessibility by accessiBe Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Web Accessibility by...

5.3CVSS5.6AI score0.00046EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 3:25 a.m.25 views

CVE-2025-13113 Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the accessiberenderjsinfooter function logging the complete plugin options array to the browser console on public pages, without...

5.3CVSS0.00046EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/19 3:25 a.m.2 views

CVE-2025-13113 Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure

The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the accessiberenderjsinfooter function logging the complete plugin options array to the browser console on public pages, without...

5.3CVSS5.5AI score0.00046EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20592

Name of the Vulnerable Software and Affected Versions Web Accessibility by accessiBe versions up to and including 2.11 Description The Web Accessibility by accessiBe plugin for WordPress is susceptible to exposure of sensitive information. This occurs because the accessibe render js in footer...

5.3CVSS5AI score0.00046EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/10/27 4:37 a.m.2 views

WordPress Web Accessibility By accessiBe plugin <= 2.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Web Accessibility By accessiBe versions = 2.10...

5.4CVSS6.8AI score0.00052EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/10/22 2:32 p.m.2 views

CVE-2025-49920

CVE-2025-49920 concerns Web Accessibility by accessiBe (WordPress plugin)

5.4CVSS6.6AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.2 views

CVE-2025-10375

The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10. This is due to missing nonce validation on multiple AJAX actions including accessibesignup, accessibelogin, accessibelicensetrial, accessibemodifyconfig,...

4.3CVSS5.4AI score0.00012EPSS
Exploits0References1
CVE
CVE
added 2025/10/11 9:28 a.m.12 views

CVE-2025-10375

The WordPress plugin Web Accessibility by accessiBe (plugins: accessibe) is affected by CVE-2025-10375. A CSRF vulnerability exists in all versions up to 2.10 due to missing nonce validation on multiple AJAX actions (accessibe_signup, accessibe_login, accessibe_license_trial, accessibe_modify_con...

4.3CVSS5AI score0.00012EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/11 9:28 a.m.3 views

CVE-2025-10375 Web Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery

The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10. This is due to missing nonce validation on multiple AJAX actions including accessibesignup, accessibelogin, accessibelicensetrial, accessibemodifyconfig,...

4.3CVSS5AI score0.00012EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.1 views

WordPress plugin Web Accessibility By accessiBe 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

4.3CVSS6.2AI score0.00012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.2 views

PT-2025-41666

Name of the Vulnerable Software and Affected Versions Web Accessibility By accessiBe plugin for WordPress versions through 2.10 Description The Web Accessibility By accessiBe plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of nonce validation on several...

4.3CVSS6.3AI score0.00012EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/02/25 2:17 p.m.6 views

CVE-2025-26981 WordPress Web Accessibility By accessiBe plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Reflected XSS.This issue affects Web Accessibility By accessiBe: from n/a through = 2.5...

7.1CVSS7.2AI score0.00112EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/25 2:17 p.m.9 views

CVE-2025-26981 WordPress Web Accessibility By accessiBe plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Reflected XSS.This issue affects Web Accessibility By accessiBe: from n/a through = 2.5...

7.1CVSS0.00112EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/23 9:11 p.m.1 views

WordPress Web Accessibility By accessiBe plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Web Accessibility By accessiBe versions = 2.5...

7.1CVSS6.1AI score0.00112EPSS
Exploits0Affected Software1
Rows per page
Query Builder