CVE-2025-49920: Accessibe Web Accessibility By Accessibe

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Web Accessibility By accessiBe: from n/a through <= 2.10.

Affected products

• Accessibe Web Accessibility By Accessibe: up to and including 2.10

Published 2025-10-22. Last modified 2026-06-17.