CVE-2025-13113

The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11. This is due to the `accessibe_render_js_in_footer()` function logging the complete plugin options array to the browser console on public pages, without restricting output to privileged users or checking for debug mode. This makes it possible for unauthenticated attackers to view sensitive configuration data, including email addresses, accessiBe user IDs, account IDs, and license information, via the browser console when the widget is disabled.

• CWE-200

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399416%40accessibe&new=3399416%40accessibe&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/aa107267-2e67-48bf-968c-7f741ecbd786?source=cve

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13102Inappropriate implementation in WebApp Installs in Google Ch…4.3
• CVE-2025-13107Inappropriate implementation in Compositing in Google Chrome…4.3
• CVE-2025-13108IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 co…7.5
• CVE-2025-13109The HUSKY – Products Filter Professional for WooCommerce plu…4.3
• CVE-2025-1311The WooCommerce Multivendor Marketplace – REST API plugin fo…6.5
• CVE-2025-13110The HUSKY – Products Filter Professional for WooCommerce plu…4.3
• CVE-2025-13114A vulnerability was identified in macrozheng mall-swarm up t…5.3
• CVE-2025-13115A security flaw has been discovered in macrozheng mall-swarm…5.3
• CVE-2025-13116A weakness has been identified in macrozheng mall-swarm and …5.3
• CVE-2025-13117A security vulnerability has been detected in macrozheng mal…5.3
• CVE-2025-13118A vulnerability was detected in macrozheng mall-swarm up to …4.3
• CVE-2025-13119A flaw has been found in Fabian Ros/SourceCodester Simple E-…6.5