Herlangga Maulani

**Name of the Vulnerable Software and Affected Versions** Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress versions prior to 1.42.1 **Description** An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can modify the ignore state, ignore reason, and ignore comment of arbitrary accessibility issues across the site. This includes the ability to perform mass modifications of all rows sharing an `object` identifier when the `largeBatch` variable is set to `true`, which compromises the integrity of accessibility audits by hiding or dismissing findings without proper authorization. **Recommendations** Update the plugin to a version newer than 1.42.0.