CVE-2026-0727

CVE-2026-0727 – Accordion and Accordion Slider for WordPress : The vulnerability is an authorization bypass in versions up to 1.4.5, affecting the wp_aas_save_attachment_data and wp_aas_get_attachment_edit_form functions. This allows authenticated attackers with contributor+ privileges to read/mo...

CVE-2026-0727 Accordion and Accordion Slider <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification

The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wpaassaveattachmentdata' and...