All 2 CVE vulnerabilities found in Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ, with AI-generated Chinese analysis, references, and POCs.
Vendor: shapedplugin
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-18988 | Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute CWE-79 | 6.4 | Medium | 2026-08-08 |
| CVE-2026-15652 | Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attribute CWE-79 | 6.4 | Medium | 2026-07-16 |
All 2 known CVE vulnerabilities affecting Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ with full Chinese analysis, references, and POCs where available.