Skip to content
OpenAdvisories
High · 7.5 CVE-2025-58024 EUVD-2025-210037GHSA-vhq5-8hgm-w39r

WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion.

This issue affects Accordion FAQ: from n/a through 2.2.1.

Affected products

VendorProductAffectedFixed
UnboundStudio Accordion FAQ ≤ 2.2.1 —

References