Vulnerabilities

TI-2024-24650 CVE-2024-37122 · GHSA-695r-9vmq-rpff

WordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Accordions allows Stored XSS.This issue affects Accordions: from n/a through 2.3.5.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-07-22 No fix listed CWE-79

TI-2023-11207 CVE-2023-25962 · GHSA-7w32-mr3g-57fc

WordPress Accordions Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs Builder plugin <= 2.3.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-04 No fix listed CWE-79

TI-2022-22171 CVE-2022-45082 · GHSA-f3wc-33m6-2qch

WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

LOW 22

Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00455 Published 2022-11-18 No fix listed CWE-79

TI-2022-17812 CVE-2022-38104 · GHSA-25c8-qcqq-xpqw

WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability

LOW 36

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01268 Published 2022-10-21 No fix listed CWE-264

TI-2022-14629 CVE-2022-33198 · GHSA-75p7-x4r4-gq93

WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

MEDIUM 55

Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03345 Published 2022-07-21 No fix listed CWE-264