| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-6443 | Essentialplugin Plugins (Various Versions) - Injected Backdoor | essentialplugin | Accordion and Accordion Slider | Critical | 9.8 | 2026-04-17 06:44:49 | Deep Dive |
| CVE-2026-4336 | Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content | rustaurius | Ultimate FAQ Accordion Plugin | Medium | 6.4 | 2026-04-09 03:25:58 | Deep Dive |
| CVE-2026-1093 | WPFAQBlock– FAQ & Accordion Plugin For Gutenberg <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute | creativewerkdesigns | WPFAQBlock– FAQ & Accordion Plugin For Gutenberg | Medium | 6.4 | 2026-03-21 03:26:41 | Deep Dive |
| CVE-2026-0727 | Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification | essentialplugin | Accordion and Accordion Slider | Medium | 5.4 | 2026-02-14 06:42:26 | Deep Dive |
| CVE-2026-1904 | Simple Wp colorfull Accordion <= 1.0 - Authenticated (Contributor+) Cross-Site Scripting via 'title' Shortcode Attribute | nayon46 | Simple Wp colorfull Accordion | Medium | 6.4 | 2026-02-14 04:35:42 | Deep Dive |
| CVE-2026-24591 | WordPress Turn Yoast SEO FAQ Block to Accordion plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability | yasir129 | Turn Yoast SEO FAQ Block to Accordion | Medium | 6.5 | 2026-01-23 14:29:01 | Deep Dive |
| CVE-2026-24565 | WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability | bPlugins | B Accordion | 中危 | - | 2026-01-23 14:28:56 | Deep Dive |
| CVE-2025-49066 | WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability | LambertGroup | Accordion Slider PRO | High | 7.1 | 2026-01-22 16:51:43 | Deep Dive |
| CVE-2026-0635 | Responsive Accordion Slider <= 1.2.2 - Missing Authorization to Authenticated (Contributor+) Slider Update via 'resp_accordion_silder_save_images' | techknowprime | Responsive Accordion Slider | Medium | 4.3 | 2026-01-14 05:28:09 | Deep Dive |
| CVE-2025-69350 | WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability | Themepoints | Accordion | Medium | 5.9 | 2026-01-06 16:36:40 | Deep Dive |
| CVE-2025-62130 | WordPress Accordion Slider Gallery plugin <= 2.7 - Broken Access Control vulnerability | wpdiscover | Accordion Slider Gallery | Medium | 4.3 | 2025-12-31 16:05:23 | Deep Dive |
| CVE-2025-64247 | WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerability | edmon.parker | Read More & Accordion | Medium | 4.3 | 2025-12-16 08:12:49 | Deep Dive |
| CVE-2025-13740 | Lightweight Accordion <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting | someguy9 | Lightweight Accordion | Medium | 6.4 | 2025-12-15 03:20:20 | Deep Dive |
| CVE-2025-67518 | WordPress Accordion Slider PRO plugin <= 1.2 - SQL Injection vulnerability | LambertGroup | Accordion Slider PRO | High | 8.5 | 2025-12-09 14:13:58 | Deep Dive |
| CVE-2025-66092 | WordPress Accordion Slider plugin <= 1.9.13 - Cross Site Scripting (XSS) vulnerability | bqworks | Accordion Slider | 中危 | - | 2025-11-21 12:29:59 | Deep Dive |
| CVE-2025-53421 | WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability | PickPlugins | Accordion | Medium | 6.5 | 2025-10-22 14:32:33 | Deep Dive |
| CVE-2025-11722 | Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion | ikhodal | Woocommerce Category and Products Accordion Panel | High | 7.5 | 2025-10-15 08:25:56 | Deep Dive |
| CVE-2025-58678 | WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability | PickPlugins | Accordion | Medium | 6.5 | 2025-09-22 18:22:50 | Deep Dive |
| CVE-2025-58838 | WordPress Smooth Accordion Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability | Zakir | Smooth Accordion | Medium | 6.5 | 2025-09-05 13:45:28 | Deep Dive |
| CVE-2025-49242 | WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability | sevenspark | Bellows Accordion Menu | Medium | 6.5 | 2025-06-06 12:53:35 | Deep Dive |