[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f94qpqgx-vglgwvzwxqpWX48BLDp4NyavZQBcfk497yU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":60,"crawl_stats":38,"alternatives":68,"analysis":163,"fingerprints":595},"wp-accessibility","WP Accessibility","2.3.2","Joe Dolson","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoedolson\u002F","\u003Cp>This plug-in helps with a variety of common accessibility problems in WordPress themes. While most accessibility issues can’t be addressed without directly changing your theme, WP Accessibility adds a number of helpful accessibility features with a minimum amount of setup or expert knowledge.\u003C\u002Fp>\n\u003Cp>WP Accessibility is not intended to make your site compatible with any accessibility guidelines.\u003C\u002Fp>\n\u003Cp>All features can be disabled according to your theme’s needs. For advanced users, all of the functions based on modifying stylesheets can be customized using your own custom styles by placing the appropriate stylesheet in your theme directory.\u003C\u002Fp>\n\u003Ch4>Theme Accessibility Features added by WP Accessibility\u003C\u002Fh4>\n\u003Cp>These are features that address issues caused by inaccessible themes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add skip links with user-defined targets. (Customizable targets and appearance.)\u003C\u002Fli>\n\u003Cli>Add language and text direction attributes to your HTML attribute if missing.\u003C\u002Fli>\n\u003Cli>Add an outline to the keyboard focus state for focusable elements.\u003C\u002Fli>\n\u003Cli>Add a long description to images. Use the image’s “Description” field to add long descriptions.\u003C\u002Fli>\n\u003Cli>Enforcement for alt attributes on images in the Classic editor.\u003C\u002Fli>\n\u003Cli>Identify images without alt attributes in the Media Library\u003C\u002Fli>\n\u003Cli>Add labels to standard WordPress form fields (search, comments)\u003C\u002Fli>\n\u003Cli>Add post titles to “read more” links.\u003C\u002Fli>\n\u003Cli>Remove tabindex from elements that are focusable. (Also fixes plugin-caused problems.)\u003C\u002Fli>\n\u003Cli>Remove user-scalable=no to allow resizing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WordPress Core Accessibility Issues fixed by WP Accessibility\u003C\u002Fh4>\n\u003Cp>These are features that address issues caused by current or past WordPress core accessibility issues. (Issues added in content, such as target or title attributes, are persistent even when WordPress is updated.)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Force a search page error when a search is made with an empty text string. (If your theme has a search.php template.)\u003C\u002Fli>\n\u003Cli>Remove redundant title attributes from tag clouds.\u003C\u002Fli>\n\u003Cli>Disable default enabling of full screen block editor.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Content specific fixes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Strip title attributes from images inserted into content.\u003C\u002Fli>\n\u003Cli>Remove the target attribute from links.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Accessibility Tools in WP Accessibility:\u003C\u002Fh4>\n\u003Cp>These are tools provided to help you identify issues you may need to fix.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Test the color contrast between two provided hexadecimal color values.\u003C\u002Fli>\n\u003Cli>Enable diagnostic CSS to show CSS-detectable problems in visual editor or on front-end of site.\u003C\u002Fli>\n\u003Cli>Search your media library on content in alt text fields.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Learn more! \u003Ca href=\"https:\u002F\u002Fdocs.joedolson.com\u002Fwp-accessibility\u002F\" rel=\"nofollow ugc\">Read about the accessibility issues corrected\u003C\u002Fa> by WP Accessibility!\u003C\u002Fp>\n\u003Cp>The plug-in is intended to help with deficiencies commonly found in themes and to solve some issues in WordPress core. It can’t correct every problem (by a long shot), but provides tools to fix some issues, supplement the accessibility of your site, or identify problems.\u003C\u002Fp>\n\u003Ch4>Statistics Collection\u003C\u002Fh4>\n\u003Cp>WP Accessibility includes a statistics collection feature to help you identify how WP Accessibility is used on your site. This package does not collect any personally identifying data.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdocs.joedolson.com\u002Fwp-accessibility\u002F2023\u002F11\u002F16\u002Fwp-accessibility-statistics\u002F\" rel=\"nofollow ugc\">Learn more about WP Accessibility statistics\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Contribute!\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-accessibility\" rel=\"nofollow ugc\">Help Translate WP Accessibility\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjoedolson\u002Fwp-accessibility\" rel=\"nofollow ugc\">Contribute to WP Accessibility\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","WP Accessibility fixes common accessibility issues in your WordPress site.",60000,1750541,96,68,"2026-02-18T18:38:00.000Z","6.9.4","5.9","7.4",[20,21,22,23,24],"a11y","accessibility","alt-text","section508","wcag","https:\u002F\u002Fwww.joedolson.com\u002Fwp-accessibility\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-accessibility.2.3.2.zip",98,2,0,"2026-02-26 19:26:02","2026-03-15T15:16:48.613Z",[33,48],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2026-2362","wp-accessibility-authenticated-contributor-stored-dom-based-cross-site-scripting-via-alt-attribute","WP Accessibility \u003C= 2.3.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'alt' Attribute","The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the \"Long Description UI\" feature in all versions up to, and including, 2.3.1. This is due to the plugin's JavaScript retrieving the alt attribute using getAttribute() and unsafely concatenating it into innerHTML and insertAdjacentHTML calls without proper sanitization or escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the \"Long Description UI\" setting to be enabled and set to \"Link to description.\"",null,"\u003C=2.3.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-02-27 08:24:23",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb08284ad-717f-4bdb-8eaa-f44e9447ff25?source=api-prod",1,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":38,"affected_versions":53,"patched_in_version":54,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":55,"updated_date":56,"references":57,"days_to_patch":59},"WF-766b5c62-0701-47d5-9839-445c2654d3e0-wp-accessibility","wp-accessibility-authenticated-stored-cross-site-scripting","WP Accessibility \u003C 1.7.0 - Authenticated Stored Cross-Site Scripting","The WP Accessibility plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.10 due to insufficient input sanitization and output escaping with a custom CSS script. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C1.7.0","1.7.0","2019-12-26 00:00:00","2024-01-22 19:56:02",[58],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F766b5c62-0701-47d5-9839-445c2654d3e0?source=api-prod",1489,{"slug":61,"display_name":7,"profile_url":8,"plugin_count":62,"total_installs":63,"avg_security_score":64,"avg_patch_time_days":65,"trust_score":66,"computed_at":67},"joedolson",6,96000,94,855,75,"2026-04-05T16:33:24.488Z",[69,88,104,120,142],{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":29,"num_ratings":29,"last_updated":79,"tested_up_to":80,"requires_at_least":81,"requires_php":82,"tags":83,"homepage":85,"download_link":86,"security_score":87,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"content-author-accessibility-preview","Content Author Accessibility Preview","1.2.0","Matt Rose","https:\u002F\u002Fprofiles.wordpress.org\u002Fboswall\u002F","\u003Cp>Flag up potential accessibility issues when your content authors preview the post or page that they have just added or amended.\u003C\u002Fp>\n\u003Cp>Currently contains checks for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Images with empty alt attributes\u003C\u002Fli>\n\u003Cli>Links that open new windows\u003C\u002Fli>\n\u003Cli>Links that have a title attribute\u003C\u002Fli>\n\u003Cli>images that have no alt attribute\u003C\u002Fli>\n\u003Cli>images that have the title attribute\u003C\u002Fli>\n\u003Cli>svg files that don`t have role=”img”\u003C\u002Fli>\n\u003Cli>inline svgs that don`t have role=”img”\u003C\u002Fli>\n\u003Cli>empty headings\u003C\u002Fli>\n\u003Cli>empty links\u003C\u002Fli>\n\u003Cli>empty buttons\u003C\u002Fli>\n\u003Cli>empty headings\u003C\u002Fli>\n\u003Cli>empty table header cells\u003C\u002Fli>\n\u003Cli>empty table data cells\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Flags each element found with an outline. Where possible explains what the issue is on the page.\u003C\u002Fp>\n\u003Cp>Can be configured to only be visible to certain user roles.\u003C\u002Fp>\n\u003Cp>Site visitors who are not logged in will not see the potential issues.\u003C\u002Fp>\n\u003Cp>Based on the work from \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fgrahamarmfield\u002Fwp-preview-csshacks\" rel=\"nofollow ugc\">Graham Armfield’s CSS tool for highlighting accessibility issues\u003C\u002Fa>\u003C\u002Fp>\n","Flag up potential accessibility issues when your content authors preview the post or page that they have just added or amended",20,1716,"2021-07-16T08:36:00.000Z","5.8.13","4.6","5.6",[20,21,84,23,24],"accessible","https:\u002F\u002Fgithub.com\u002Fboswall\u002FContent-Author-Accessibility-Preview","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontent-author-accessibility-preview.zip",85,{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":77,"downloaded":96,"rating":29,"num_ratings":29,"last_updated":97,"tested_up_to":98,"requires_at_least":17,"requires_php":18,"tags":99,"homepage":101,"download_link":102,"security_score":103,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wcag-admin-accessibility-tools","WCAG Admin Accessibility Tools","1.0.3","PluginRx","https:\u002F\u002Fprofiles.wordpress.org\u002Fapos37\u002F","\u003Cp>\u003Cstrong>WCAG Admin Accessibility Tools\u003C\u002Fstrong> provides a dual approach to accessibility improvements in WordPress: practical diagnostic tools for admins and editors, and optional front-end visual enhancements for users.\u003C\u002Fp>\n\u003Cp>This plugin is designed to complement the WAVE browser extension by WebAIM by offering tools that WAVE doesn’t cover or that we wanted to improve on. For a more complete accessibility review, using both is recommended.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Accessibility Admin Bar Tools:\u003C\u002Fstrong> Adds a front-end admin bar menu with auto-check and toggleable visual checks for accessibility issues:\u003Cbr \u002F>\n  – Missing Alt Text\u003Cbr \u002F>\n  – Poor Color Contrast (AA\u002FAAA)\u003Cbr \u002F>\n  – Vague Link Text (e.g. “click here”)\u003Cbr \u002F>\n  – Improper Heading Hierarchy (e.g. skipping from H2 to H4)\u003Cbr \u002F>\n  – Links Missing Underlines (excluding buttons and navs)\u003Cbr \u002F>\n– \u003Cstrong>Skip to Content Link:\u003C\u002Fstrong> Inserts a visually hidden “Skip to main content” link at the top of each page for improved keyboard navigation.\u003Cbr \u002F>\n– \u003Cstrong>Alt Text Column & Inline Editing:\u003C\u002Fstrong> Adds an “Alt Text” column to the Media Library list view, including an edit option for quickly updating missing or incorrect image alt text.\u003Cbr \u002F>\n– \u003Cstrong>Additional Media Columns:\u003C\u002Fstrong> Adds columns for image dimensions, MIME type (e.g. \u003Ccode>image\u002Fpng\u003C\u002Fcode>, \u003Ccode>application\u002Fzip\u003C\u002Fcode>), and file size.\u003Cbr \u002F>\n– \u003Cstrong>Frontend Mode Switcher:\u003C\u002Fstrong> Adds an accessibility mode switcher for Dark Mode, and Greyscale, optionally placed as:\u003Cbr \u002F>\n  – A floating toggle\u003Cbr \u002F>\n  – A navigation menu item\u003Cbr \u002F>\n  – A shortcode (\u003Ccode>[wcagaat_modes]\u003C\u002Fcode>)\u003Cbr \u002F>\n– \u003Cstrong>Logo Swap in Dark Mode:\u003C\u002Fstrong> Optionally swap logos when dark mode is enabled.\u003Cbr \u002F>\n– \u003Cstrong>Custom Visibility Rules:\u003C\u002Fstrong> Choose who can see the frontend mode switcher — everyone, logged-in users, or just admins.\u003Cbr \u002F>\n– \u003Cstrong>Custom Vague Phrases:\u003C\u002Fstrong> Configure your own list of vague link texts to scan for (e.g. “read more, learn more, click here”).\u003C\u002Fp>\n\u003Cp>WCAG Admin Accessibility Tools gives you clear, actionable insights directly in the WordPress UI to improve accessibility compliance faster.\u003C\u002Fp>\n","Accessibility diagnostics and tools for alt text, contrast, vague links, and more.",251,"2025-10-29T19:46:00.000Z","6.8.5",[20,21,22,100,24],"screen-reader","https:\u002F\u002Fpluginrx.com\u002Fplugin\u002Fwcag-admin-accessibility-tools\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwcag-admin-accessibility-tools.1.0.3.zip",100,{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":29,"downloaded":112,"rating":29,"num_ratings":29,"last_updated":113,"tested_up_to":16,"requires_at_least":114,"requires_php":115,"tags":116,"homepage":118,"download_link":119,"security_score":103,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"accessibility-site-scanner","WebTechee AccessScan","1.0.0","WebTechee","https:\u002F\u002Fprofiles.wordpress.org\u002Fgauri87\u002F","\u003Cp>\u003Cstrong>WebTechee AccessScan\u003C\u002Fstrong> helps WordPress site owners and developers quickly identify common accessibility issues on their site.\u003C\u002Fp>\n\u003Cp>The plugin performs an automated scan of your published content and highlights issues such as:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Images missing \u003Ccode>alt\u003C\u002Fcode> attributes\u003C\u002Fli>\n\u003Cli>Empty anchor links without accessible text\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The scan runs on demand from the WordPress admin and displays results instantly — no configuration required.\u003C\u002Fp>\n\u003Cp>This lightweight, stateless scanner is designed for quick checks during development or content review.\u003C\u002Fp>\n\u003Cp>⚠️ This plugin does not store scan data in the database and does not modify your content.\u003C\u002Fp>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>AccessScan\u003C\u002Fstrong> in the WordPress admin menu\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Run Scan\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Review detected accessibility issues and affected HTML elements\u003C\u002Fli>\n\u003Cli>Fix issues directly in your content or theme\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>One-click accessibility scan\u003C\u002Fli>\n\u003Cli>Detects common WCAG-related issues\u003C\u002Fli>\n\u003Cli>Displays affected HTML elements for easier fixes\u003C\u002Fli>\n\u003Cli>Lightweight and fast\u003C\u002Fli>\n\u003Cli>No database tables\u003C\u002Fli>\n\u003Cli>No scheduled tasks\u003C\u002Fli>\n\u003Cli>No front-end scripts added\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Free vs Pro\u003C\u002Fh3>\n\u003Cp>This is the \u003Cstrong>free version\u003C\u002Fstrong> of WebTechee AccessScan.\u003C\u002Fp>\n\u003Cp>The free version focuses on:\u003Cbr \u002F>\n* Instant scanning\u003Cbr \u002F>\n* Common accessibility checks\u003Cbr \u002F>\n* No data storage\u003C\u002Fp>\n\u003Cp>A \u003Cstrong>Pro version\u003C\u002Fstrong> is planned with advanced features such as:\u003Cbr \u002F>\n* Scan history\u003Cbr \u002F>\n* Scheduled scans\u003Cbr \u002F>\n* Accessibility scoring\u003Cbr \u002F>\n* Exportable reports\u003Cbr \u002F>\n* Advanced issue detection\u003C\u002Fp>\n","Run automated accessibility scans to detect common accessibility issues on your WordPress site.",122,"2026-01-15T06:19:00.000Z","5.8","7.2",[20,21,117,22,24],"accessibility-checker","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faccessibility-site-scanner.1.0.0.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":16,"requires_at_least":133,"requires_php":18,"tags":134,"homepage":137,"download_link":138,"security_score":139,"vuln_count":140,"unpatched_count":29,"last_vuln_date":141,"fetched_at":31},"pojo-accessibility","Ally – Web Accessibility & Usability","4.1.0","Elementor","https:\u002F\u002Fprofiles.wordpress.org\u002Felemntor\u002F","\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F-2ig5D348vo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Ally (formerly One Click Accessibility) is a free, powerful, and user-friendly plugin that helps WordPress creators build more accessible websites with ease.\u003Cbr \u002F>\nIt simplifies accessibility with three essential tools:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Ally Assistant\u003C\u002Fstrong> – Scan your pages, detect accessibility violations, and follow guided steps to fix them. Make manual adjustments or apply AI-powered suggestions, and track your progress.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Usability widget\u003C\u002Fstrong> – Let visitors personalize their browsing experience with a floating accessibility menu. Features include font resizing, color contrast, image hiding, animation pausing, language selection, screen reader support, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Accessibility statement generator\u003C\u002Fstrong> – Create a fully customized accessibility statement and publish it automatically on your site, helping meet WCAG and legal requirements.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>No expertise required\u003C\u002Fstrong> -just activate, configure, and start making your site more inclusive today.Built by Elementor. Designed for every WordPress site. Ally is web accessibility—simplified.\u003C\u002Fp>\n\u003Ch3>Why does web accessibility matter?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Who Needs It?\u003C\u002Fstrong> Every website owner—businesses, creators, and agencies.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Who is Responsible?\u003C\u002Fstrong> Website owners are legally and ethically responsible for accessibility. The web creator—who designs and builds the site—must implement and adjust accessibility features to ensure compliance with WCAG guidelines and provide an inclusive experience for all users.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why Now?\u003C\u002Fstrong> Rising legal requirements (WCAG, EAA) and better user experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Why Should You Care?\u003C\u002Fstrong>  An accessible website isn’t just ethical; it’s good business. By prioritizing inclusivity, you improve user experience for everyone, boost your search engine rankings, and attract a wider audience.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>It’s the Law\u003C\u002Fh3>\n\u003Cp>As accessibility standards continue to evolve and become mandatory, it’s important to start making website adjustments to comply with fast-approaching global regulations. Among its other capabilities, this plugin lets you instantly generate your website’s Accessibility Statement, which is now mandatory in most locales.\u003C\u002Fp>\n\u003Cp>The Ally plugin is not a substitute for a thorough accessibility audit and is NOT intended to completely make your website legally compliant. However, with it, you’re one step closer to making your website inclusive to more visitors, including those with visual, auditory or cognitive challenges.\u003C\u002Fp>\n\u003Cp>Ensuring that your website complies with all applicable accessibility requirements is your responsibility. We recommend working with qualified accessibility professionals to help achieve full compliance.\u003C\u002Fp>\n\u003Ch3>Key Features & Benefits\u003C\u002Fh3>\n\u003Ch4>Ally Assistant\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Scan any URL on demand to detect accessibility gaps\u003C\u002Fli>\n\u003Cli>Launch directly from WordPress or Elementor\u003C\u002Fli>\n\u003Cli>Step-by-step guidance to fix issues\u003C\u002Fli>\n\u003Cli>AI-powered remediation suggestions\u003C\u002Fli>\n\u003Cli>Progress tracking via a visual dashboard\u003C\u002Fli>\n\u003Cli>No accessibility expertise required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Cp>Ally Assistant scans individual URLs for accessibility violations, categorizes them by type and severity, and provides actionable insights. You can apply manual fixes manually or use AI suggestions while tracking your progress over time.\u003Cbr \u002F>\nAlly Assistant helps you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detect missing alternative text\u003C\u002Fli>\n\u003Cli>Label dynamic content & ARIA landmarks\u003C\u002Fli>\n\u003Cli>Validate forms & flag input errors\u003C\u002Fli>\n\u003Cli>Ensure keyboard & assistive tech compatibility\u003C\u002Fli>\n\u003Cli>Identify accessibility violations in tables\u003C\u002Fli>\n\u003Cli>Repair incorrect page structure & navigation\u003C\u002Fli>\n\u003Cli>Flag color contrast & visual style violations (coming soon)\u003C\u002Fli>\n\u003Cli>And detect 180+ other common accessibility violations based on WCAG 2.1 AA\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Accessibility Statement Generator\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Auto-generate a complete  accessibility statement\u003C\u002Fli>\n\u003Cli>Customize and publish to a dedicated page\u003C\u002Fli>\n\u003Cli>Link it using the widget\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usability Widget\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Offer visitors a customizable menu with features like:\u003C\u002Fli>\n\u003Cli>Contrast Modes (high, dark, light, negative)\u003C\u002Fli>\n\u003Cli>Font resizing & readable font toggle\u003C\u002Fli>\n\u003Cli>Pause animations & hide images\u003C\u002Fli>\n\u003Cli>Line height & text alignment options\u003C\u002Fli>\n\u003Cli>Keyboard navigation enhancements\u003C\u002Fli>\n\u003Cli>Underlined links & reading guide\u003C\u002Fli>\n\u003Cli>Skip to content \u002F sitemap viewer\u003C\u002Fli>\n\u003Cli>Language selector\u003C\u002Fli>\n\u003Cli>Skip to Main Content\u003C\u002Fli>\n\u003Cli>Restore defaults & widget toggle\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Premium widget features are also available within paid plans, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Screen reader compatibility improvements\u003C\u002Fli>\n\u003Cli>White labeling (remove Elementor branding)\u003C\u002Fli>\n\u003Cli>Language selector directly in the widget\u003C\u002Fli>\n\u003Cli>Usage analytics to gain actionable insights from visitor interactions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Widget customization options for web creators\u003C\u002Fh4>\n\u003Cp>Tailor the widget’s look and behavior with options like:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show\u002Fhide widget icon on mobile or desktop\u003C\u002Fli>\n\u003Cli>Select icon type and size\u003C\u002Fli>\n\u003Cli>Choose colors for icon, header, and text\u003C\u002Fli>\n\u003Cli>Define icon position (corner selection)\u003C\u002Fli>\n\u003Cli>Add\u002Fedit sitemap URL\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable features per device or user role\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Get Started Today\u003C\u002Fh3>\n\u003Ch3>Make your site more accessible with Ally!\u003C\u002Fh3>\n\u003Cp>Need help? Visit our \u003Ca href=\"https:\u002F\u002Fgo.elementor.com\u002Facc-wp-repo-learn-more\" rel=\"nofollow ugc\">help center\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fgo.elementor.com\u002Fwp-repo-wp-dash-sm-contact-us\u002F\" rel=\"nofollow ugc\">contact Supoprt\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin requires a connection to an active Elementor account in order to identify the user and provide the user with the purchased service. This connection is initiated manually by the user via the plugin’s settings panel. Learn more about our \u003Ca href=\"https:\u002F\u002Fgo.elementor.com\u002Facc-wp-repo-term-and-conditions\" rel=\"nofollow ugc\">terms and conditions\u003C\u002Fa>. This plugin uses a 3rd party service operated by Elementor.\u003C\u002Fp>\n\u003Cp>More accessibility features are on the way, so stay tuned!\u003C\u002Fp>\n\u003Ch3>Related Plugins\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsite-mailer\u002F\" rel=\"ugc\">Site Mailer\u003C\u002Fa>: Manage transactional emails with ease with Site Mailer. High deliverability, detailed logs and statistics, and no SMTP plugins needed.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fimage-optimization\u002F\" rel=\"ugc\">Image Optimizer\u003C\u002Fa>: Compress and optimize your images, giving you leaner, faster websites. Automatically optimize any new image you upload or run a bulk optimization process for existing uploads.\u003C\u002Fli>\n\u003C\u002Ful>\n","Ally: Make your site more inclusive by scanning for accessibility violations, fixing them easily, and adding a usability widget and accessibility stat …",500000,4256750,58,151,"2026-02-23T10:06:00.000Z","6.6",[20,21,135,24,136],"accessibility-statement","web-accessibility","https:\u002F\u002Felementor.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpojo-accessibility.4.1.0.zip",93,4,"2026-03-10 16:11:03",{"slug":143,"name":144,"version":145,"author":146,"author_profile":147,"description":148,"short_description":149,"active_installs":150,"downloaded":151,"rating":152,"num_ratings":153,"last_updated":154,"tested_up_to":155,"requires_at_least":156,"requires_php":118,"tags":157,"homepage":160,"download_link":161,"security_score":162,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"accessible-poetry","AccessibleWP – Accessibility Toolbar","5.4.0","UserWay","https:\u002F\u002Fprofiles.wordpress.org\u002Fuserwayorg\u002F","\u003Cp>Add a professional accessibility toolbar to your WordPress site and make it easier for users with disabilities.\u003C\u002Fp>\n\u003Ch3>Toolbar Options\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Keyboard Navigation – Allows to navigate using the keyboard\u003C\u002Fli>\n\u003Cli>Disable Animation – Allows to disable CSS3 animations\u003C\u002Fli>\n\u003Cli>Dark Contrast – Allows to change the site colors to colors with dark contrast (also let you choose the colors if you want)\u003C\u002Fli>\n\u003Cli>Change Font Size – Allows to increase or decrease the font size\u003C\u002Fli>\n\u003Cli>Readable Font – Allows to change the font-family to more readable font (also let you choose which font is the readable font if you want)\u003C\u002Fli>\n\u003Cli>Mark Titles – Allows to mark the titles\u003C\u002Fli>\n\u003Cli>Highlight Links – Allows to mark all links\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Please Note\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>This plugin aims to solve challenges in the accessibility of WordPress sites, it does not cover all the guidelines required according to the WCAG but helps to reach it. To make your website fully accessible in accordance with the regulations, please consult an \u003Ca href=\"https:\u002F\u002Fwww.codenroll.co.il\u002F\" rel=\"nofollow ugc\">accessibility expert\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>The authors of the plugin are not responsible to your website, to the user or to any third party for any direct or indirect damage of any kind from any use of this plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add a professional accessibility toolbar to your WordPress site and make it easier for users with disabilities.",20000,138099,90,47,"2024-10-03T08:04:00.000Z","6.6.5","4.1",[20,21,158,159,24],"section-508","wai","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Faccessible-poetry\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faccessible-poetry.5.4.0.zip",92,{"attackSurface":164,"codeSignals":358,"taintFlows":477,"riskAssessment":586,"analyzedAt":594},{"hooks":165,"ajaxHandlers":342,"restRoutes":350,"shortcodes":351,"cronEvents":356,"entryPointCount":357,"unprotectedCount":29},[166,172,178,182,186,190,194,198,202,206,209,212,216,219,223,226,230,234,238,242,246,250,254,258,261,266,270,274,277,280,283,288,292,296,300,304,307,311,315,319,323,327,331,335,338],{"type":167,"name":168,"callback":169,"file":170,"line":171},"filter","manage_media_columns","wpa_media_columns","wp-accessibility-alt.php",16,{"type":173,"name":174,"callback":175,"priority":176,"file":170,"line":177},"action","manage_media_custom_column","wpa_media_value",10,17,{"type":167,"name":179,"callback":180,"priority":176,"file":170,"line":181},"attachment_fields_to_edit","wpa_insert_alt_verification",163,{"type":167,"name":183,"callback":184,"priority":176,"file":170,"line":185},"attachment_fields_to_save","wpa_save_alt_verification",187,{"type":167,"name":187,"callback":188,"priority":176,"file":170,"line":189},"image_send_to_editor","wpa_alt_attribute",206,{"type":173,"name":191,"callback":192,"file":170,"line":193},"init","wpa_add_editor_styles",254,{"type":173,"name":195,"callback":196,"file":170,"line":197},"enqueue_block_assets","wpa_block_editor_assets",263,{"type":167,"name":199,"callback":200,"priority":176,"file":201,"line":171},"wp_get_attachment_image_attributes","wpa_featured_longdesc","wp-accessibility-longdesc.php",{"type":173,"name":203,"callback":204,"file":201,"line":205},"template_redirect","wpa_longdesc_template",50,{"type":167,"name":187,"callback":207,"priority":176,"file":201,"line":208},"wpa_longdesc_add_attr",130,{"type":173,"name":191,"callback":210,"file":201,"line":211},"wpa_register_block_style",191,{"type":173,"name":213,"callback":214,"file":215,"line":171},"admin_enqueue_scripts","wpa_admin_styles","wp-accessibility-settings.php",{"type":173,"name":213,"callback":217,"file":215,"line":218},"closure",558,{"type":173,"name":191,"callback":220,"file":221,"line":222},"wpa_post_type","wp-accessibility-stats.php",48,{"type":173,"name":191,"callback":224,"priority":29,"file":221,"line":225},"wpa_taxonomies",66,{"type":173,"name":227,"callback":228,"file":221,"line":229},"wp_dashboard_setup","wp_accessibility_dashboard_widget",250,{"type":167,"name":231,"callback":232,"priority":176,"file":221,"line":233},"the_title","wpa_stats_title",641,{"type":173,"name":235,"callback":236,"file":221,"line":237},"admin_init","wpa_add",645,{"type":167,"name":239,"callback":240,"file":221,"line":241},"manage_wpa-stats_posts_columns","wpa_column",650,{"type":173,"name":243,"callback":244,"priority":176,"file":221,"line":245},"manage_wpa-stats_posts_custom_column","wpa_custom_column",651,{"type":173,"name":247,"callback":248,"file":221,"line":249},"add_meta_boxes","wpa_add_meta_boxes",726,{"type":173,"name":251,"callback":252,"file":253,"line":177},"widgets_init","wpa_register_toolbar_widget","wp-accessibility-toolbar.php",{"type":173,"name":255,"callback":256,"file":253,"line":257},"wp_enqueue_scripts","wpa_register_scripts",25,{"type":173,"name":255,"callback":259,"file":253,"line":260},"wpa_toolbar_enqueue_scripts",44,{"type":173,"name":262,"callback":263,"priority":176,"file":264,"line":265},"admin_notices","wpa_status_notice","wp-accessibility.php",59,{"type":173,"name":267,"callback":268,"file":264,"line":269},"admin_menu","wpa_admin_menu",80,{"type":167,"name":271,"callback":272,"priority":176,"file":264,"line":273},"plugin_action_links","wpa_plugin_action",148,{"type":173,"name":255,"callback":275,"file":264,"line":276},"wpa_stylesheet",164,{"type":173,"name":278,"callback":279,"file":264,"line":211},"admin_head","wpa_admin_stylesheet",{"type":173,"name":255,"callback":281,"priority":103,"file":264,"line":282},"wpa_enqueue_js",343,{"type":173,"name":284,"callback":285,"priority":286,"file":264,"line":287},"admin_bar_menu","wpa_logout_item",11,556,{"type":167,"name":289,"callback":290,"priority":77,"file":264,"line":291},"posts_clauses","wpa_search_attachment_alt",576,{"type":167,"name":293,"callback":294,"file":264,"line":295},"mce_css","wpa_diagnostic_css",596,{"type":167,"name":297,"callback":298,"file":264,"line":299},"pre_get_posts","wpa_filter",613,{"type":173,"name":301,"callback":302,"file":264,"line":303},"template_include","wpa_search_error",628,{"type":167,"name":305,"callback":217,"file":264,"line":306},"body_class",652,{"type":167,"name":308,"callback":309,"priority":103,"file":264,"line":310},"get_the_excerpt","wpa_custom_excerpt_more",658,{"type":167,"name":312,"callback":313,"priority":103,"file":264,"line":314},"excerpt_more","wpa_excerpt_more",659,{"type":167,"name":316,"callback":317,"priority":103,"file":264,"line":318},"the_content_more_link","wpa_content_more",660,{"type":173,"name":320,"callback":321,"file":264,"line":322},"enqueue_block_editor_assets","wpa_disable_editor_fullscreen_by_default",860,{"type":167,"name":324,"callback":325,"file":264,"line":326},"block_type_metadata","wpa_disable_file_embed_by_default",878,{"type":167,"name":328,"callback":329,"priority":176,"file":264,"line":330},"register_block_type_args","wpa_remove_h1",902,{"type":167,"name":332,"callback":333,"file":264,"line":334},"the_content","wpa_content_summary",923,{"type":173,"name":267,"callback":336,"file":264,"line":337},"wpa_add_outer_box",985,{"type":173,"name":339,"callback":340,"priority":176,"file":264,"line":341},"save_post","wpa_save_content_summary",1040,[343,348],{"action":344,"nopriv":345,"callback":344,"hasNonce":346,"hasCapCheck":345,"file":221,"line":347},"wpa_stats_action",false,true,239,{"action":344,"nopriv":346,"callback":344,"hasNonce":346,"hasCapCheck":345,"file":221,"line":349},240,[],[352],{"tag":353,"callback":354,"file":253,"line":355},"wpa_toolbar","wpa_toolbar_shortcode",117,[],3,{"dangerousFunctions":359,"sqlUsage":360,"outputEscaping":362,"fileOperations":29,"externalRequests":29,"nonceChecks":62,"capabilityChecks":62,"bundledLibraries":476},[],{"prepared":28,"raw":29,"locations":361},[],{"escaped":363,"rawEcho":364,"locations":365},89,57,[366,370,372,374,375,377,378,381,383,385,388,390,392,394,396,398,399,401,403,405,406,408,411,413,415,417,419,420,422,424,426,428,430,432,434,436,438,440,442,444,446,448,450,452,454,455,456,457,459,461,462,464,466,468,470,472,474],{"file":367,"line":368,"context":369},"class-wp-accessibility-toolbar.php",51,"raw output",{"file":367,"line":371,"context":369},53,{"file":367,"line":373,"context":369},54,{"file":367,"line":225,"context":369},{"file":367,"line":376,"context":369},67,{"file":367,"line":376,"context":369},{"file":379,"line":380,"context":369},"templates\\longdesc-template.php",22,{"file":379,"line":382,"context":369},23,{"file":379,"line":384,"context":369},36,{"file":386,"line":387,"context":369},"wp-accessibility-admin.php",56,{"file":386,"line":389,"context":369},73,{"file":386,"line":391,"context":369},116,{"file":386,"line":393,"context":369},165,{"file":386,"line":395,"context":369},168,{"file":170,"line":397,"context":369},55,{"file":170,"line":130,"context":369},{"file":170,"line":400,"context":369},60,{"file":170,"line":402,"context":369},62,{"file":170,"line":404,"context":369},64,{"file":170,"line":225,"context":369},{"file":170,"line":407,"context":369},70,{"file":409,"line":410,"context":369},"wp-accessibility-overlay.php",84,{"file":409,"line":412,"context":369},105,{"file":409,"line":414,"context":369},169,{"file":215,"line":416,"context":369},127,{"file":215,"line":418,"context":369},158,{"file":215,"line":347,"context":369},{"file":215,"line":421,"context":369},267,{"file":215,"line":423,"context":369},296,{"file":215,"line":425,"context":369},320,{"file":215,"line":427,"context":369},338,{"file":215,"line":429,"context":369},372,{"file":215,"line":431,"context":369},378,{"file":215,"line":433,"context":369},408,{"file":215,"line":435,"context":369},489,{"file":215,"line":437,"context":369},523,{"file":221,"line":439,"context":369},292,{"file":221,"line":441,"context":369},294,{"file":221,"line":443,"context":369},299,{"file":221,"line":445,"context":369},680,{"file":221,"line":447,"context":369},715,{"file":221,"line":449,"context":369},719,{"file":221,"line":451,"context":369},721,{"file":221,"line":453,"context":369},743,{"file":264,"line":376,"context":369},{"file":264,"line":14,"context":369},{"file":264,"line":407,"context":369},{"file":264,"line":458,"context":369},71,{"file":264,"line":460,"context":369},72,{"file":264,"line":66,"context":369},{"file":264,"line":463,"context":369},794,{"file":264,"line":465,"context":369},798,{"file":264,"line":467,"context":369},800,{"file":264,"line":469,"context":369},806,{"file":264,"line":471,"context":369},810,{"file":264,"line":473,"context":369},817,{"file":264,"line":475,"context":369},1005,[],[478,495,507,515,525,533,543,551,561,571],{"entryPoint":479,"graph":480,"unsanitizedCount":47,"severity":494},"\u003Clongdesc-template> (templates\\longdesc-template.php:0)",{"nodes":481,"edges":492},[482,487],{"id":483,"type":484,"label":485,"file":379,"line":486},"n0","source","$_GET",33,{"id":488,"type":489,"label":490,"file":379,"line":384,"wp_function":491},"n1","sink","echo() [XSS]","echo",[493],{"from":483,"to":488,"sanitized":345},"low",{"entryPoint":496,"graph":497,"unsanitizedCount":29,"severity":494},"wpa_update_admin_settings (wp-accessibility-admin.php:21)",{"nodes":498,"edges":505},[499,502],{"id":483,"type":484,"label":500,"file":386,"line":501},"$_POST (x7)",29,{"id":488,"type":489,"label":503,"file":386,"line":384,"wp_function":504},"update_option() [Settings Manipulation]","update_option",[506],{"from":483,"to":488,"sanitized":346},{"entryPoint":508,"graph":509,"unsanitizedCount":29,"severity":494},"\u003Cwp-accessibility-admin> (wp-accessibility-admin.php:0)",{"nodes":510,"edges":513},[511,512],{"id":483,"type":484,"label":500,"file":386,"line":501},{"id":488,"type":489,"label":503,"file":386,"line":384,"wp_function":504},[514],{"from":483,"to":488,"sanitized":346},{"entryPoint":516,"graph":517,"unsanitizedCount":29,"severity":494},"wpa_update_overlay_settings (wp-accessibility-overlay.php:21)",{"nodes":518,"edges":523},[519,522],{"id":483,"type":484,"label":520,"file":409,"line":521},"$_POST (x13)",30,{"id":488,"type":489,"label":503,"file":409,"line":130,"wp_function":504},[524],{"from":483,"to":488,"sanitized":346},{"entryPoint":526,"graph":527,"unsanitizedCount":29,"severity":494},"\u003Cwp-accessibility-overlay> (wp-accessibility-overlay.php:0)",{"nodes":528,"edges":531},[529,530],{"id":483,"type":484,"label":520,"file":409,"line":521},{"id":488,"type":489,"label":503,"file":409,"line":130,"wp_function":504},[532],{"from":483,"to":488,"sanitized":346},{"entryPoint":534,"graph":535,"unsanitizedCount":29,"severity":494},"wpa_update_settings (wp-accessibility-settings.php:46)",{"nodes":536,"edges":541},[537,539],{"id":483,"type":484,"label":538,"file":215,"line":373},"$_POST (x23)",{"id":488,"type":489,"label":503,"file":215,"line":540,"wp_function":504},63,[542],{"from":483,"to":488,"sanitized":346},{"entryPoint":544,"graph":545,"unsanitizedCount":29,"severity":494},"\u003Cwp-accessibility-settings> (wp-accessibility-settings.php:0)",{"nodes":546,"edges":549},[547,548],{"id":483,"type":484,"label":538,"file":215,"line":373},{"id":488,"type":489,"label":503,"file":215,"line":540,"wp_function":504},[550],{"from":483,"to":488,"sanitized":346},{"entryPoint":552,"graph":553,"unsanitizedCount":29,"severity":494},"\u003Cwp-accessibility-stats> (wp-accessibility-stats.php:0)",{"nodes":554,"edges":559},[555,558],{"id":483,"type":484,"label":556,"file":221,"line":557},"$_REQUEST (x8)",231,{"id":488,"type":489,"label":490,"file":221,"line":439,"wp_function":491},[560],{"from":483,"to":488,"sanitized":346},{"entryPoint":562,"graph":563,"unsanitizedCount":29,"severity":494},"wpa_get_support_form (wp-accessibility.php:715)",{"nodes":564,"edges":569},[565,568],{"id":483,"type":484,"label":566,"file":264,"line":567},"$_POST",781,{"id":488,"type":489,"label":490,"file":264,"line":473,"wp_function":491},[570],{"from":483,"to":488,"sanitized":346},{"entryPoint":572,"graph":573,"unsanitizedCount":29,"severity":494},"\u003Cwp-accessibility> (wp-accessibility.php:0)",{"nodes":574,"edges":583},[575,576,577,581],{"id":483,"type":484,"label":566,"file":264,"line":567},{"id":488,"type":489,"label":490,"file":264,"line":473,"wp_function":491},{"id":578,"type":484,"label":579,"file":264,"line":580},"n2","$_REQUEST",777,{"id":582,"type":489,"label":490,"file":264,"line":475,"wp_function":491},"n3",[584,585],{"from":483,"to":488,"sanitized":346},{"from":578,"to":582,"sanitized":346},{"summary":587,"deductions":588},"The wp-accessibility plugin v2.3.2 exhibits a generally good security posture with strong adherence to best practices in critical areas. The absence of critical or high severity taint flows, fully prepared SQL queries, and a lack of dangerous functions or file operations are significant strengths. Furthermore, the presence of nonce and capability checks on all identified entry points, including AJAX handlers and shortcodes, significantly mitigates common attack vectors. The plugin also avoids external HTTP requests and bundled libraries, further reducing its attack surface. However, a notable concern is the output escaping, where 61% of outputs are properly escaped, leaving a substantial portion potentially vulnerable to Cross-Site Scripting (XSS) attacks. While the static analysis shows no *current* unsanitized paths, the history of two medium severity XSS vulnerabilities, with the last one in 2026, suggests a recurring weakness in input sanitization or output encoding that requires continuous vigilance. The plugin's history, despite having no currently unpatched vulnerabilities, indicates a past susceptibility to XSS, which coupled with the imperfect output escaping, warrants a cautious approach.",[589,592],{"reason":590,"points":591},"Imperfect output escaping",8,{"reason":593,"points":176},"Medium severity vulnerability history (XSS)","2026-03-16T17:17:01.007Z",{"wat":596,"direct":607},{"assetPaths":597,"generatorPatterns":601,"scriptPaths":602,"versionParams":603},[598,599,600],"\u002Fwp-content\u002Fplugins\u002Fwp-accessibility\u002Fcss\u002Fwpa-style.css","\u002Fwp-content\u002Fplugins\u002Fwp-accessibility\u002Fcss\u002Fdiagnostic.css","\u002Fwp-content\u002Fplugins\u002Fwp-accessibility\u002Fcss\u002Fdiagnostic-head.css",[],[],[604,605,606],"wp-accessibility\u002Fcss\u002Fwpa-style.css?ver=","wp-accessibility\u002Fcss\u002Fdiagnostic.css?ver=","wp-accessibility\u002Fcss\u002Fdiagnostic-head.css?ver=",{"cssClasses":608,"htmlComments":611,"htmlAttributes":622,"restEndpoints":625,"jsGlobals":626,"shortcodeOutput":628},[609,610],"wpa-toolbar","wpa-overlay",[612,613,614,615,616,617,618,619,620,621],"\u003C!-- WP Accessibility Skip Links -->","\u003C!-- WP Accessibility Toolbar -->","\u003C!-- WP Accessibility Overlay Settings -->","\u003C!-- WP Accessibility Longdesc Button -->","\u003C!-- WP Accessibility Alternative Text -->","\u003C!-- WP Accessibility Contrast -->","\u003C!-- WP Accessibility Settings -->","\u003C!-- WP Accessibility Overlay -->","\u003C!-- WP Accessibility Admin -->","\u003C!-- WP Accessibility Help -->",[623,624],"data-wpa-id","data-wpa-label",[],[627],"wpa_toolbar_settings",[]]