WordPress plugin
Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium7
- Low0
All Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter ≤1.46.0Update to 1.47.0 | CVE-2026-14481 | |
| Medium4.3 | Missing Authorization to Authenticated (Author+) Arbitrary Accessibility Issue Modification via 'largeBatch' Parameter ≤1.42.1Update to 1.43.0 | CVE-2026-9199 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Arbitrary Accessibility Issue Modification via edac_insert_ignore_data AJAX Action ≤1.42.0Update to 1.42.1 | CVE-2026-9015 | |
| Medium4.3 | Missing Authorization ≤1.31.0Update to 1.31.1 | CVE-2025-58976 | |
| Medium4.3 | Missing Authorization ≤1.31.0Update to 1.31.1 | CVE-2025-58981 | |
| Medium4.3 | Authenticated (Contributor+) Insecure Direct Object Reference ≤1.30.0Update to 1.30.1 | CVE-2025-57886 | |
| Medium6.3 | Missing Authorization Checks all versionsNo patch available | CVE-2022-4974 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter
≤1.46.0Update to 1.47.0
- Medium4.3Missing Authorization to Authenticated (Author+) Arbitrary Accessibility Issue Modification via 'largeBatch' Parameter
≤1.42.1Update to 1.43.0
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Accessibility Issue Modification via edac_insert_ignore_data AJAX Action
≤1.42.0Update to 1.42.1
- Medium4.3Missing Authorization
≤1.31.0Update to 1.31.1
- Medium4.3Missing Authorization
≤1.31.0Update to 1.31.1
- Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
≤1.30.0Update to 1.30.1
- Medium6.3Missing Authorization Checks
all versionsNo patch available
Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance: common questions
Does Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance: 7 medium. At least one is not fixed in the latest version.
How do I check which version of Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance vulnerability?
CVE-2026-14481, published Jul 22, 2026: Equalize Digital Accessibility Checker <= 1.46.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' Parameter. Severity: Medium (CVSS 6.4).
Is any Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance vulnerability listed in CISA KEV?
No. None of the known Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance vulnerabilities is currently listed in the CISA KEV catalog.