CVE-2025-58976

MediumCVSS 4.3

Published: 09/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

The Accessibility Checker by Equalize Digital plugin through version 1.31.0 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This may lead to unauthorized access to functions or data.

Risk Assessment

An attacker could bypass access controls and perform operations reserved for authorized users. This affects data confidentiality and integrity in WordPress.

Recommendation

Update the Accessibility Checker plugin to a version later than 1.31.0. Review WordPress role permissions.

Other vulnerabilities in Accessibility Checker by Equalize Digital

CVE-2025-58981Medium
The Accessibility Checker by Equalize Digital plugin (versions up to 1.31.0) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through <= 1.31.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS