WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
accordion_slider_pro
Published
2026-01-12
Title
Accordion Slider PRO <= 1.2 - Reflected Cross-Site Scripting
Slug
accordions
Published
2020-04-14
Title
Accordion < 2.2.9 - Unprotected AJAX Action to Stored/Reflected XSS
Slug
accordions
Published
2021-04-21
Title
Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
accordions
Published
2024-03-13
Title
Accordion < 2.2.97 - Missing Authorization to Authenticated(Contributor+) Post Duplication
Slug
accordions
Published
2024-09-27
Title
Accordion < 2.2.100 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
accordions
Published
2025-04-09
Title
Accordion < 2.3.12 - Contributor+ PHP Object Injection
Slug
accordions
Published
2025-09-22
Title
Accordion < 2.3.16 - Missing Authorization
Slug
accordions
Published
2025-09-16
Title
Accordion < 2.3.16 - Missing Authorization
Slug
accordions
Published
2026-06-08
Title
Accordions < 2.3.25 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
Slug
accordions
Published
2026-10-26
Title
Accordions <= 2.3.25 - Authenticated (Editor+) PHP Object Injection
Slug
accordions-or-faqs
Published
2022-06-30
Title
Accordions < 2.0.3 - Unauthenticated Arbitrary Options Update
Slug
accordions-or-faqs
Published
2022-09-29
Title
Accordions < 2.1.0 - Authenticated Arbitrary Options Update
Slug
accordions-or-faqs
Published
2022-09-29
Title
Accordions < 2.1.0 - Admin+ Stored XSS
Slug
accordions-or-faqs
Published
2023-02-22
Title
Accordions < 2.3.1 - Admin+ Stored XSS
Slug
accordions-or-faqs
Published
2024-06-20
Title
Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
accordions-wp
Published
2023-10-29
Title
Accordion < 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
accordions-wp
Published
2023-11-15
Title
Accordion < 2.7 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Slug
accordions-wp
Published
2026-01-07
Title
Accordion < 3.0.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
accordions-wp
Published
2026-08-10
Title
Accordions – Responsive Accordion & FAQ Plugin for WordPress < 3.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
account-switcher
Published
2026-05-19
Title
Account Switcher <= 1.0.2 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation
Slug
accounting-for-woocommerce
Published
2024-12-04
Title
Accounting for WooCommerce < 1.6.7 - Reflected Cross-Site Scripting
Slug
accounting-for-woocommerce
Published
2025-03-11
Title
Accounting for WooCommerce <=1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
accounting-for-woocommerce
Published
2025-03-27
Title
Accounting for WooCommerce < 1.6.9 - Unauthenticated Local File Inclusion
Slug
accredible-certificates
Published
2023-12-19
Title
Accredible Certificates & Open Badges < 1.4.9 - Admin+ Stored XSS
Slug
accredible-certificates
Published
2025-04-09
Title
Accredible Certificates & Open Badges < 1.5.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter