CVE-2025-13113

Name of the Vulnerable Software and Affected Versions Web Accessibility by accessiBe versions up to and including 2.11

Description The Web Accessibility by accessiBe plugin for WordPress is susceptible to exposure of sensitive information. This occurs because the accessibe render js in footer() function logs the complete plugin options array to the browser console on public pages without appropriate restrictions. This allows unauthenticated attackers to view sensitive configuration data, including email addresses, accessiBe user IDs, account IDs, and license information, via the browser console when the widget is disabled.

Recommendations Versions prior to 2.11 should be updated to a newer version that addresses this issue.