All 2 CVE vulnerabilities found in Ally, with AI-generated Chinese analysis, references, and POCs.
Vendor: Elementor
| CVE ID | Title | CVSS | Severity | Paused |
|---|---|---|---|---|
| CVE-2026-25386 | WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability CWE-862 | 8.1AI | HighAI | 2026-02-19 |
| CVE-2025-32640 | WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability CWE-79 | 5.9 | Medium | 2025-04-09 |
All 2 known CVE vulnerabilities affecting Ally with full Chinese analysis, references, and POCs where available.