Pickplugins Accordion vulnerabilities

• pickplugins accordion WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability CVE-2026-116392 7.2 HighOctober 28, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-66471 6.5 MediumAugust 13, 2026
• biplob adhikari accordions Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field CVE-2026-10862 6.4 MediumJune 9, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-69350 5.9 MediumJanuary 6, 2026
• pickplugins accordion WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability CVE-2025-53421 6.5 MediumOctober 22, 2025
• pickplugins accordion WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability CVE-2025-58678 6.5 MediumSeptember 22, 2025
• pickplugins accordion WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability CVE-2025-32143 8.8 HighApril 11, 2025
• pickplugins accordion WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability CVE-2024-47342 6.5 MediumOctober 6, 2024
• pickplugins tabs & accordion WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability CVE-2023-40557 5.4 MediumJune 4, 2024
• biplob adhikari accordions Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication CVE-2024-1641 5.4 MediumApril 9, 2024
• pickplugins accordion WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47809 5.9 MediumNovember 22, 2023
• pickplugins accordion Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24283 5.4 MediumMay 14, 2021
• pickplugins accordion An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX... CVE-2020-13644 5.4 MediumMay 28, 2020