WordPress Accessibility Suite by Ability, Inc Missing Authorization Vulnerability Allowing Broken Access Control

A missing authorization vulnerability has been identified in the WordPress Accessibility Suite plugin by Ability, Inc, affecting versions through 4.16. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions without proper authorization.

Impact

Exploitation of this vulnerability could allow an unprivileged user to perform actions that require higher privileges, due to the broken access control.

Remediation

Users of the WordPress Accessibility Suite plugin should update to version 4.19 or later. Patchstack users can enable auto-update for vulnerable plugins.