SQL Injection Vulnerability in Accessibility Suite Plugin by Ability, Inc. for WordPress

CVE-2026-3773

What is CVE-2026-3773?

The Accessibility Suite plugin developed by Ability, Inc. for WordPress contains a vulnerability that exposes it to SQL Injection attacks via the 'scan_id' parameter. This vulnerability affects all versions of the plugin up to and including 4.20. Insufficient escaping of user-supplied input combined with inadequate SQL query preparation allows authenticated attackers with Subscriber-level access and above to inject malicious SQL queries. This can potentially lead to unauthorized access to sensitive database information, highlighting the need for timely remediation to protect user data.

References