Ally

pojo-accessibility · plugin

Known security vulnerabilities for Ally. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

1 with public exploit code · latest Mar 11, 2026

Vulnerabilities

CVE-2026-2413
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
High 7.5
CVE-2025-32640
WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability
Medium 5.9
CVE-2026-25386
WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability
Medium 5.3