Medium
CVE-2026-66471
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filters
Medium
CVE-2026-10862
Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
Medium
CVE-2025-69350
Accordion <= 3.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-66155
Questionar for Elementor <= 1.1.7 - Missing Authorization
Medium
CVE-2025-58678
Accordion <= 2.3.15 - Missing Authorization
Medium
CVE-2025-53421
Accordion <= 2.3.14 - Missing Authorization
Medium
CVE-2025-31923
CSS3 Accordions for WordPress <= 3.0 - Missing Authorization
Medium
CVE-2025-31922
CSS3 Accordions for WordPress <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-2543
Advanced Accordion Gutenberg Block <= 5.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2025-32143
Accordion <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-13721
Plethora Plugins Tabs + Accordions <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor
Medium
CVE-2025-24709
Plethora Plugins Tabs + Accordions <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10689
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-47375
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47342
Accordion <= 2.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5946
Squelch Tabs and Accordions Shortcodes <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode
Medium
CVE-2024-37122
Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4463
Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery
Medium
CVE-2024-2499
Squelch Tabs and Accordions Shortcodes <= 0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via accordions Shortcode
Medium
CVE-2024-1641
Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication
Medium
CVE-2023-47809
Accordion <= 2.6 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Medium
CVE-2023-5666
Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25962
Accordions <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Several Parameters
Medium
CVE-2022-38104
Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.