PT-2026-63801 · WordPress · Wp Accessibility Helper

CVE-2026-24537

·

Published

2026-07-23

·

Updated

2026-07-23

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions WP Accessibility Helper (WAH) versions prior to 0.6.7
Description An unauthenticated Cross Site Request Forgery (CSRF) issue exists, which allows an attacker to force an authenticated user to execute unwanted actions on the web application.
Recommendations Update WP Accessibility Helper (WAH) to a version newer than 0.6.6.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-24537

Affected Products

Wp Accessibility Helper