Biplob Adhikari Vulnerabilities and Affected Products
Vulnerabilities associated with Accordions – Multiple Accordions or FAQs Builder (WordPress plugin).
Products
Clear product- Accordions – Multiple Accordions or FAQs Builder (WordPress plugin)2 vulnerabilities
- Image Hover Effects Ultimate (WordPress plugin)2 vulnerabilities
- Tabs (WordPress plugin)2 vulnerabilities
- Accordion – Multiple Accordion or FAQs Builder1 vulnerability
- Accordions1 vulnerability
- Accordions (WordPress plugin)1 vulnerability
- Flipbox (WordPress plugin)1 vulnerability
- Tabs1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesMultiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key. CWE-79Nov 18, 2022 | CVSS3.4v3.1 | EPSS0.404% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2022-38104HIGH | WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerabilityAuth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress. CWE-264Oct 21, 2022 | CVSS7.2v3.1 | EPSS0.921% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |