Skip to content
Sign in
5.4 Medium

CVE-2024-1641 The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a…

Description

The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_duplicate_post_as_draft' function in all versions up to, and including, 2.2.96. This makes it possible for authenticated attackers, with contributor access and above, to duplicate arbitrary posts, allowing access to the contents of password-protected posts.

Affected products and versions

Product Affected versions Fixed in
Accordion 2.2 earliest → 2.2.96 No fix stated
Accordions 2.2 earliest → 2.2.96 No fix stated

Other CVEs of Accordion

The 7 CVEs of Accordion →
CVE-2026-116392 Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue… 7.2 High CVE-2025-53421 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured… 6.5 Medium CVE-2025-58678 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured… 6.5 Medium CVE-2025-32143 Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue… 8.8 High
Track this CVE