The vulnerability in Equalize Digital Accessibility Checker by Equalize Digital arises from incorrectly configured access control security levels. An attacker who can exploit this flaw can gain unauthorized access to plugin functionality or administrative features that should be restricted. The primary impact is the potential compromise of confidentiality and integrity within the WordPress installation, allowing misuse of the plugin’s capabilities without proper authorization. This weakness is identified by CWE-862.

WordPress installations that use the Accessibility Checker by Equalize Digital plugin, specifically any deployment of versions 1.31.0 or earlier. The vulnerability applies to all WordPress sites where this plugin is installed, regardless of the overall WordPress version, since the flaw resides entirely within the plugin code.

The CVSS score of 5.4 designates the flaw as a moderate risk, while the EPSS of less than 1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been observed in active attacks. Likely, the attack vector is remote via the WordPress web interface, where an attacker can interact with the plugin’s endpoints to elevate privileges or modify settings. Until a patch is applied, the risk remains moderate but low based on current exploitation statistics.