Medium · 5.9 CVE-2023-25962 EUVD-2023-29849GHSA-7w32-mr3g-57fc

WordPress Accordions Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

Published May 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Biplob Adhikari Product: Accordion – Multiple Accordion or FAQs Builder

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs Builder plugin <= 2.3.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Biplob Adhikari	Accordion – Multiple Accordion or FAQs Builder	≤ 2.3.0	—

References

https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-multiple-accordions-or-faqs-builder-plugin-2-3-0-cross-site-scripting-xss?_s_id=cve vdb-entry