Accordion – Multiple Accordion or FAQs Builder

Accordion – Multiple Accordion or FAQs Builder has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 10 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2022 was the busiest year with 9 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (82%). Other recurring categories include Missing Authorization.

10 of the records (91%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (9) reported by R3N0.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage91%

Open

Fixed

Get automatic notifications for all Accordion – Multiple Accordion or FAQs Builder vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2024-37122

Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

11 records


2024-06-20 00:00	Accordions <= 2.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Accordion <= 2.3.5	`CVE-2024-37122`	4.4 Medium	Jean Tirstan T	No
2023-02-22 00:00	Accordions <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Several Parameters Accordion <= 2.3.0	`CVE-2023-25962`	4.4 Medium	Rio Darmawan	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'rawdata' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'layouts' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'pages' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'notice' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting in post_oxi_settings function Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated Arbitrary Options Update Accordion <= 2.0.3	`CVE-2022-38104`	4.3 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'pages' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes
2022-09-29 00:00	Accordions – Multiple Accordions or FAQs Builder <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via 'license' parameter Accordion <= 2.0.3	`CVE-2022-45082`	5.5 Medium	R3N0	Yes

Showing 1–10 of 11 reports