Accessibility Suite by Ability, Inc

Accessibility Suite by Ability, Inc has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 7 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 4 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is SQL Injection, behind 5 of the records (63%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

7 of the records (88%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

6 independent researchers contributed these findings, most of them (2) reported by minhtuanact.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage88%

Open

Fixed

Get automatic notifications for all Accessibility Suite by Ability, Inc vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2026-3773

Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter

Read the full analysis

Vulnerability Records

8 records


2026-04-15 16:46	Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter Accessibility Suite by Ability, Inc <= 4.20	`CVE-2026-3773`	6.5 Medium	Victor Pasman	No
2025-06-05 00:00	Accessibility Suite <= 4.19 - Missing Authorization Accessibility Suite by Ability, Inc <= 4.19	`CVE-2025-30636`	4.3 Medium	Nguyen Xuan Chien	Yes
2025-04-09 00:00	Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) SQL Injection Accessibility Suite by Ability, Inc <= 4.18	`CVE-2025-32650`	6.5 Medium	Phúc ton luoi	Yes
2025-04-07 00:00	Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload Accessibility Suite by Ability, Inc <= 4.18	`CVE-2025-32215`	8.8 High	theviper17y	Yes
2025-01-31 00:00	Accessibility Suite by Ability, Inc <= 4.18 - Missing Authorization Accessibility Suite by Ability, Inc <= 4.18	`CVE-2025-22698`	6.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2023-10-13 00:00	Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection Accessibility Suite by Ability, Inc <= 4.12	`CVE-2023-45830`	8.8 High	minhtuanact	Yes
2023-04-19 00:00	Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection Accessibility Suite by Ability, Inc <= 4.11	`CVE-2022-47420`	8.8 High	minhtuanact	Yes
2019-02-13 00:00	Accessibility Suite by Online ADA < 2.0.11 - SQL Injection Accessibility Suite by Ability, Inc < 2.0.11	`N/A`	8.8 High	Anonymous	Yes

Showing 1–8 of 8 reports