Skip to content
OpenAdvisories

Vendor

edmonparker

6 known vulnerabilities.

Products

Read More & Accordion 5 Download, Downloads 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-7472

    Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

    The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.5.7. This is due to the use of esc_sql() without surrounding the value in quotes in an ORDER BY …

    edmonparker Read More & Accordion Web / CMS
  • Medium 4.3
    CVE-2025-64247

    WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through <= 3.5.5.1.

    edmonparker Read More & Accordion
  • Medium 4.3
    CVE-2024-13639

    Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion

    The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated…

    edmonparker Read More & Accordion Web / CMS