Ally

Elementor

Developer

3.9.1

Latest version

400,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

0 present

2 fixed

0 Mitigation rules

WordPress Ally - Web Accessibility & Usability plugin <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update vulnerability
<= 3.8.0
Oct 16, 2025
Cross-Site Scripting (XSS) vulnerability
<= 3.1.0
Apr 9, 2025