Lucene search

CVE-2024-11643 Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

🗓️ 04 Dec 2024 15:21:22Reported by WordfenceType

Accessibility plugin vulnerability in WordPress 1.3.

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2024-11643	4 Dec 202416:15	–	nvd
CVE	CVE-2024-11643	4 Dec 202416:15	–	cve
Cvelist	CVE-2024-11643 Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update	4 Dec 202415:22	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:allaccessible:accessibility:*:*:*:*:*:*:*:*"
    ],
    "vendor": "allaccessible",
    "product": "accessibility",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.3.4"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/allaccessible/trunk/allaccessible.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/bb65d916-7d9e-4562-ab9b-c7ba012a08fb
plugins	www.plugins.trac.wordpress.org/changeset/3202017/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Dec 2024 15:22Current

7.4High risk

Vulners AI Score7.4

CVSS38.8

EPSS0.0004

SSVC

CWE-862