CVE-2026-24537
WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.
CVSS 3.1 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products