The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is pr…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.00998·Published 2023-10-16·Fixed in 3.2.7
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2.