Plugin icon

Read More & Accordion

expand-maker
Plugin closed

Vulnerabilities:

6

Last Updated:

February 8, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-19
Title
Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Fixed in
No known fix
CVSS
4.9 (medium)
Published
2026-05-19
Title
Read More & Accordion <= 3.5.7 - Privilege Escalation via importData
Fixed in
No known fix
CVSS
7.2 (high)
Published
2025-12-15
Title
Read More & Accordion < 3.5.6 - Missing Authorization
Fixed in
Fixed in 3.5.6
CVSS
4.3 (medium)
Published
2025-04-04
Title
Read More & Accordion < 3.4.8 - Local File Inclusion via CSRF
Fixed in
Fixed in 3.4.8
CVSS
7.5 (high)
Published
2025-02-12
Title
Read More & Accordion < 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
Fixed in
Fixed in 3.4.3
CVSS
4.3 (medium)
Published
2023-09-11
Title
Read More & Accordion < 3.2.7 - Admin+ PHP Object Injection
Fixed in
Fixed in 3.2.7
CVSS
3.3 (low)