Alex Volkov
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Accessibility Helper (WAH) | 4 | – | Jul 23, 2026 |
| Chatter | 1 | – | Jan 16, 2025 |
| WAH Forms | 1 | – | Mar 3, 2025 |
| Woo Tuner | 1 | – | Jan 16, 2025 |
| WP Nice Loader | 1 | – | Dec 31, 2024 |
Exploited and recent CVEs
- CVE-2026-24537 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-23763 WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability 0.5%
- CVE-2025-23761 WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability 0.5%
- CVE-2025-23760 WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability 0.4%
- CVE-2024-56232 WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2023-41869 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability 0.5%
- CVE-2024-37926 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability 0.4%
- CVE-2024-31423 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.5 - Broken Access Control vulnerability 0.3%