CVE-2025-47681: WordPress Web Accessibility with Max Access plugin <= 2.0.9 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Cross Site Request Forgery.This issue affects Web Accessibility with Max Access: from n/a through <= 2.0.9.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access allows Cross Site Request Forgery. This issue affects Web Accessibility with Max Access: from n/a through 2.0.9.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47681?
The severity of CVE-2025-47681 is classified as high due to its potential for exploitation through Cross-Site Request Forgery.
How do I fix CVE-2025-47681?
To fix CVE-2025-47681, upgrade the Ability, Inc Web Accessibility with Max Access to the latest version beyond 2.0.9.
What types of systems are affected by CVE-2025-47681?
CVE-2025-47681 affects Ability, Inc Web Accessibility with Max Access and WordPress Web Accessibility with Max Access up to version 2.0.9.
What kind of attack can exploit CVE-2025-47681?
CVE-2025-47681 can be exploited through Cross-Site Request Forgery (CSRF) attacks, allowing unauthorized actions on behalf of users.
Is CVE-2025-47681 present in all versions of the affected software?
No, CVE-2025-47681 is only present in versions of Ability, Inc Web Accessibility with Max Access from n/a through 2.0.9.