Plugin icon

Accordions

accordions

Vulnerabilities:

8

Last Updated:

June 8, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-06-08
Title
Accordions < 2.3.25 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
Fixed in
Fixed in 2.3.25
CVSS
6.4 (medium)
Published
2025-09-22
Title
Accordion < 2.3.16 - Missing Authorization
Fixed in
Fixed in 2.3.16
CVSS
4.3 (medium)
Published
2025-09-16
Title
Accordion < 2.3.16 - Missing Authorization
Fixed in
Fixed in 2.3.16
CVSS
4.3 (medium)
Published
2025-04-09
Title
Accordion < 2.3.12 - Contributor+ PHP Object Injection
Fixed in
Fixed in 2.3.12
CVSS
6.6 (medium)
Published
2024-09-27
Title
Accordion < 2.2.100 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.100
CVSS
6.4 (medium)
Published
2024-03-13
Title
Accordion < 2.2.97 - Missing Authorization to Authenticated(Contributor+) Post Duplication
Fixed in
Fixed in 2.2.97
CVSS
5.4 (medium)
Published
2021-04-21
Title
Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.2.30
CVSS
7.1 (high)
Published
2020-04-14
Title
Accordion < 2.2.9 - Unprotected AJAX Action to Stored/Reflected XSS
Fixed in
Fixed in 2.2.9
CVSS
5.4 (medium)