CVE-2026-9015

Name of the Vulnerable Software and Affected Versions Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress versions prior to 1.42.1

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can modify the ignore state, ignore reason, and ignore comment of arbitrary accessibility issues across the site. This includes the ability to perform mass modifications of all rows sharing an object identifier when the largeBatch variable is set to true, which compromises the integrity of accessibility audits by hiding or dismissing findings without proper authorization.

Recommendations Update the plugin to a version newer than 1.42.0.