WordPress plugin
Web Accessibility by accessiBe security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium5
- Low0
All Web Accessibility by accessiBe vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤2.11Update to 2.12 | CVE-2025-13113 | |
| Medium4.3 | Missing Authorization ≤2.10Update to 2.11 | CVE-2025-49920 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.10Update to 2.11 | CVE-2025-10375 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.5Update to 2.6 | CVE-2025-26981 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.15Update to 1.16 | — |
- Medium5.3Unauthenticated Sensitive Information Exposure
≤2.11Update to 2.12
- Medium4.3Missing Authorization
≤2.10Update to 2.11
- Medium4.3Cross-Site Request Forgery
≤2.10Update to 2.11
- Medium6.1Reflected Cross-Site Scripting
≤2.5Update to 2.6
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.15Update to 1.16
Web Accessibility by accessiBe: common questions
Does Web Accessibility by accessiBe have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Web Accessibility by accessiBe: 5 medium. None are known to affect version null.
How do I check which version of Web Accessibility by accessiBe I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Web Accessibility by accessiBe vulnerability?
CVE-2025-13113, published Feb 18, 2026: Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure. Severity: Medium (CVSS 5.3).
Is any Web Accessibility by accessiBe vulnerability listed in CISA KEV?
No. None of the known Web Accessibility by accessiBe vulnerabilities is currently listed in the CISA KEV catalog.