Plugin icon

Ally – Web Accessibility & Usability

pojo-accessibility

Vulnerabilities:

4

Last Updated:

April 20, 2026

Active Installs:

500000

Published
Title
Fixed in
CVSS
Published
2026-03-10
Title
Ally < 4.1.0 - Unauthenticated SQLi via URL Path
Fixed in
Fixed in 4.1.0
CVSS
7.5 (high)
Published
2026-02-19
Title
Ally < 4.0.3 - Missing Authorization
Fixed in
Fixed in 4.0.3
CVSS
5.3 (medium)
Published
2025-10-15
Title
Ally - Web Accessibility & Usability < 3.8.1 - Cross-Site Request Forgery to Plugin Settings Update
Fixed in
Fixed in 3.8.1
CVSS
4.3 (medium)
Published
2025-04-09
Title
One Click Accessibility < 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.0
CVSS
4.4 (medium)