Skip to content
OpenAdvisories

Product · PickPlugins

Accordions

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-10862

    Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field

    The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all versions up to, and including, 2.3.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…

    PickPlugins Accordions Web / CMS
  • Medium 5.4
    CVE-2024-1641

    Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication

    The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_duplicate_post_as_draft' function in all versions up to, and including, 2.2.96. This makes it possibl…

    PickPlugins Accordions Web / CMS