CVE-2024-37926 — WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability

CVE-2024-37926

WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.

Affected (CNA)

Vendor / product	Versions
Alex Volkov / WP Accessibility Helper (WAH)	affected n/a through 0.6.2.9

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/wp-accessibility-helper/wordpress-wp-accessibility-helper-wah-plugin-0-6-2-8-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.