Read More & Accordion vulnerabilities

2 known vulnerabilities in Read More & Accordion from Edmonparker. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Read More & Accordion: Improper Privilege Management

  CVE-2026-7467May 20, 2026EdmonparkerEPSS 1.31%

  The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7. This is due to the 'RadMoreAjax::importData' function not restricting which database tables can be written to during import and no

• 7.5 High severity

  Read More & Accordion: Cross-Site Request Forgery

  CVE-2025-0810Apr 5, 2025Edmonparker

  The Read More & Accordion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.7. This is due to missing or incorrect nonce validation on the addNewButtons() function. This makes it possible for unauthentic