6.4 Moyenne

CVE-2026-10862 The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all…

Description

The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all versions up to, and including, 2.3.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Accordions 2.3	premières → 2.3.23	Pas de correctif indiqué

Les 2 CVE de Accordions →

CVE-2024-1641 The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a… 5.4 Moyenne

Vous utilisez Accordions ?

Suivre cette CVE Surveiller Accordions Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2026-10862

Chronologie

Publiée 9 juin 2026
Dernière modification 9 juin 2026

Références

www.wordfence.com www.wordfence.com
plugins.trac.wordpress.org plugins.trac.wordpress.org

Suivre cette CVE

CVE-2026-10862 The Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Accordion body field in all…

Description

Produits et versions touchés

Autres CVE de Accordions