CVE-2022-38104

ALTO 7.2CVE-2022-38104 · Published 21/10/2022 · updated 17/06/2026

In breve

CVE-2022-38104 è una vulnerabilità ALTO (CVSS 7.2) che riguarda accordions (oxilab).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 69.1% delle vulnerabilità.
Correzione: aggiornare a 2.1.0 o successiva.

Package	Affected versions	Patched versions
accordions oxilab	`< 2.1.0`	`2.1.0`

Description

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress.

References

patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-3-authenticated-wordpress-options-change-vulnerability · Third Party Advisory
wordpress.org/plugins/accordions-or-faqs · Product

Altre vulnerabilità di accordions

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

accordions

oxilab

< 2.1.0

2.1.0

Altre vulnerabilità di accordions

Vedi tutto →