Accordion vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AC

Product

Accordion

by PickPlugins · last CVE Oct 28, 2026

6

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 2Medium 4Low 0

Severity

All severities6 Critical0 High2 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Accordion to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-32143	8.8	1%	Apr 11	WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability Affected: through 2.3.11
CVE-2026-116392 New	7.2	–	Oct 28	WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability Affected: through 2.3.25
CVE-2025-53421	6.5	0%	Oct 22	WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability Affected: through 2.3.14
CVE-2025-58678	6.5	0%	Sep 22	WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability Affected: through 2.3.15
CVE-2021-24283	5.4	1%	May 14	The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue Affected: before 2.2.30
CVE-2020-13644	5.4	1%	May 28	An issue was discovered in the Accordion plugin before 2.2.9 for WordPress Affected: before 2.2.9