Vulnerabilities and security researches forplethora-tabs-accordions plethora-tabs-accordions

Jan 26, 2025

CVE, Research URL: CVE-2025-24709
Home page URL: Security reports for Plethora Plugins Tabs + Accordions
Application: Plethora Plugins Tabs + Accordions
Date: Jan 24, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plethora Plugins Plethora Plugins Tabs + Accordions plethora-tabs-accordions allows Stored XSS.This issue affects Plethora Plugins Tabs + Accordions: from n/a through <= 1.1.5.
Affected versions: max 1.2.1.
Status: vulnerable

Jun 14, 2026

CVE, Research URL: CVE-2024-13721
Home page URL: Security reports for Plethora Plugins Tabs + Accordions
Application: Plethora Plugins Tabs + Accordions
Date: Jan 25, 2025
Research Description: The Plethora Plugins Tabs + Accordions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the anchor parameter in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.2.
Status: vulnerable