5.4
Moyenne
CVE-2024-1641 The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a…
Description
The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_duplicate_post_as_draft' function in all versions up to, and including, 2.2.96. This makes it possible for authenticated attackers, with contributor access and above, to duplicate arbitrary posts, allowing access to the contents of password-protected posts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Accordion 2.2 | premières → 2.2.96 | Pas de correctif indiqué |
| Accordions 2.2 | premières → 2.2.96 | Pas de correctif indiqué |
Autres CVE de Accordion
Les 7 CVE de Accordion →
CVE-2026-116392
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
7.2
Élevée
CVE-2025-53421
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Moyenne
CVE-2025-58678
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Moyenne
CVE-2025-32143
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
8.8
Élevée