Vendor
elemntor
- CVEs tracked · all time
- 1
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- articles · all time
- 2
No articles in the last 45 daysThe latest: Security Affairs, Thu 12 Mar, 13:40 UTC.See the full timeline
Products: Ally – Web Accessibility & Usability
CVEs
1 CVECVE-2026-2413Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL PathCVSSUnrated–Not in KEV2.3%EPSS2articles
- Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sitesSecurity Affairs
- Ally WordPress Plugin Flaw Exposes Over 200,000 Websites to AttacksSecurityWeek · first in our coverage