← Back

Read More & Accordion

read_more_&_accordion

Vendor: Edmonsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-13639
1Edmonsoft
1Read More & Accordion
Jun 17, 2026
Feb 13, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. T...Show more
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary 'read more' posts.Show less
CVE-2023-3392
1Edmonsoft
1Read More & Accordion
Jun 17, 2026
Oct 16, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is pr...Show more
The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.Show less