Pickplugins Accordion vulnerabilities
6 vulnerabilities
Known vulnerabilities in Pickplugins Accordion, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2021-24283pickplugins · accordion +1 moreAccordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.EPSS0.62%MediumCVE-2025-53421pickplugins · accordion +1 moreWordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerabilityMissing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through <= 2.3.14.EPSS0.32%MediumCVE-2025-58678pickplugins · accordion +1 moreWordPress Accordion Plugin <= 2.3.15 - Broken Access Control VulnerabilityMissing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through <= 2.3.15.EPSS0.32%HighCVE-2025-32143pickplugins · accordion +1 moreWordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue affects Accordion: from n/a through <= 2.3.11.EPSS1.06%MediumCVE-2020-13644pickplugins · accordion +1 morepickplugins accordionAn issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher permissions the ability to import a new accordion and inject malicious JavaScript as part of the accordion.EPSS0.77%MediumCVE-2024-47342pickplugins · accordion +1 moreWordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Accordion accordions allows Stored XSS.This issue affects Accordion: from n/a through <= 2.2.99.EPSS0.27%