Accordion vulnerabilities

2 known vulnerabilities in Accordion from PickPlugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Accordion: Deserialization of Untrusted Data

  CVE-2026-116392Oct 28, 2026PickPlugins

  Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue affects Accordion: from n/a through 2.3.25.

• 8.8 High severity

  Accordion: Deserialization of Untrusted Data

  CVE-2025-32143Apr 11, 2025PickPluginsEPSS 1.08%

  Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue affects Accordion: from n/a through <= 2.3.11.