Read More & Accordion <= 3.4.7 - Cross-Site Request Forgery to Local File Inclusion
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Tampering
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-352.
Summary
The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.7. This is due to missing or incorrect nonce validation on the addNewButtons() function. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| edmonparker | Read More & Accordion | up to 3.4.7 | — | No fix listed | CNA |
- Read More & Accordion Vendoredmonparker Affected up to 3.4.7 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0810
- 2026-10-03 Alias added: GHSA-f5jv-rh3p-2g3q
References
Other 5
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a963cd9b-9f8f-4bd2-92cd-74c5e85e1d96?source=cve
- https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMorePages.php#L82
- https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMorePages.php#L59
- https://plugins.trac.wordpress.org/browser/expand-maker/trunk/classes/ReadMoreInit.php#L122
- https://plugins.trac.wordpress.org/changeset/3265987/
More edmonparker vulnerabilities
- TI-2024-11679 Contact Form Master <= 1.0.7 - Reflected XSS CVSS 3.1MEDIUM 6.1
- TI-2026-06563 Read More & Accordion <= 3.5.7 - Privilege Escalation via importData CVSS 3.1HIGH 8.8
- TI-2025-17308 WordPress Download, Downloads plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability CVSS 3.1HIGH 7.1
- TI-2026-06568 Read More & Accordion <= 3.5.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter CVSS 3.1MEDIUM 4.9
- TI-2024-12678 Missing authorization in edmonparker Read More & Accordion CVSS 3.1MEDIUM 4.3
- TI-2025-39690 WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerability CVSS 3.1MEDIUM 4.3
Sources
- CVE-2025-0810 · CVE Program
- CVE-2025-0810 · NVD
- FIRST EPSS
- GHSA-f5jv-rh3p-2g3q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences