Wp Accessibility Helper

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-5987 Aug 29, 11:15 MEDIUM PATCH This Month

The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_contrast_variations' and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Wordpress Plugin Wp Accessibility Helper

NVD

CVSS 3.1

4.3

EPSS

0.3%

CVE-2024-31423 Jun 09, 18:15 HIGH This Week

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH).6.2.5. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wp Accessibility Helper

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2022-0150 Feb 28, 09:15 MEDIUM POC This Month

The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wordpress Plugin Wp Accessibility Helper

NVD WPScan

CVSS 3.1

6.1

EPSS

1.7%

CVE-2024-5987

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress Authentication Bypass Wordpress Plugin +1

NVD

CVE-2024-31423

EPSS 0% CVSS 8.8

HIGH This Week

Authentication Bypass Wp Accessibility Helper

NVD

CVE-2022-0150

EPSS 2% CVSS 6.1

MEDIUM POC This Month

WordPress XSS Wordpress Plugin +1

NVD WPScan