cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches foraccessibility-checker accessibility-checker

Direction: descending
Aug 24, 2025

Equalize Digital Accessibility Checker – Audit Your Website for WCAG, ADA, and Section 508 Accessibility Errors # CVE-2025-57886

CVE, Research URL

CVE-2025-57886

Date
Aug 22, 2025
Research Description
Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Checker by Equalize Digital: from n/a through 1.30.0.
Affected versions
Min -, max -.
Status
vulnerable
Nov 16, 2024

Equalize Digital Accessibility Checker – Audit Your Website for WCAG, ADA, and Section 508 Accessibility Errors # CVE-2022-4974

CVE, Research URL

CVE-2022-4974

Date
Oct 16, 2024
Research Description
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.
Affected versions
Min -, max -.
Status
vulnerable
Jun 07, 2024

Equalize Digital Accessibility Checker – Audit Your Website for WCAG, ADA, and Section 508 Accessibility Errors # 00953e40d1a23c96a72bb008c75ee1e862e1c06b

Date
Feb 28, 2022
Research Description
Equalize Digital Accessibility Checker &#8211; Audit Your Website for WCAG, ADA, and Section 508 Accessibility Errors [accessibility-checker] < 1.2.8 WordPress Accessibility Checker by Equalize Digital plugin < 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Accessibility Checker by Equalize Digital plugin (versions < 1.2.8).
Affected versions
Min -, max -.
Status
vulnerable