CVE-2022-38104

WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability

High · published October 21, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01238 · 68.9th percentile
Published
2022-10-21T15:33Z
EPSS history
Timeline
  • 21 OCT 15:33Z
    WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability
    cvelistv5