CVE-2026-24537

The WP Accessibility Helper (WAH) versions up to 0.6.6 are vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) attack, which could allow an attacker to perform unauthorized actions on behalf of a user without their consent. This vulnerability poses a medium risk, particularly for website administrators and developers using the affected plugin, who should prioritize applying updates or mitigating measures to protect their sites from potential exploitation.