Product

Ally Web Accessibility (<= 4.0.3)

1 brief RSS

Ally Web Accessibility: Unauthenticated SQL Injection (CVE-2026-2413)

The Ally Web Accessibility plugin for WordPress is vulnerable to unauthenticated time-based blind SQL injection in the get_global_remediations() method.

Ally Web Accessibility web-vulnerability sqli wordpress plugin

1c 5m ago