WordPress Plugin Vulnerabilities

Online Accessibility <= 2.0.10 - CSRF and lack of Authorisation in AJAX methods

Description

The Accessibility Suite by Online ADA WordPress plugin was affected by a CSRF and lack of Authorisation in AJAX methods security vulnerability.

Affects Plugins

Plugin icon
online-accessibility
Fixed in 2.0.11

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2030071%40online-accessibility&old=2027537%40online-accessibility

Miscellaneous

Verified
No
WPVDB ID
579cc2f6-8879-4f44-a274-eec3b33774b0

Timeline

Publicly Published
2019-02-13 (about 7 years ago)
Added
2019-06-28 (about 6 years ago)
Last Updated
2019-06-28 (about 6 years ago)

Other

Published
Title
Published
2017-02-23
Title
Democracy Poll < 5.4 - CSRF & XSS
Published
2021-07-12
Title
Frontend File Manager < 18.3 - Authenticated Arbitrary Settings Change to Arbitrary File Upload
Published
2014-10-07
Title
Wordfence <= 5.2.4 - Multiple Vulnerabilities (XSS & Bypasses)
Published
2015-03-28
Title
Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download
Published
2020-01-02
Title
Postie < 1.9.41 - Post Submission Spoofing & Stored Cross-Site Scripting (XSS)