Executive Summary

The Accordion and Accordion Slider plugin for WordPress version 1.4.6 contains an injected backdoor. This happened because the plugin was sold to a malicious threat actor who embedded a backdoor into all copies of the plugin they acquired.

This backdoor allows the attacker to maintain persistent unauthorized access to websites using the plugin.

Additionally, the attacker can inject spam into the affected sites.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have severe impacts including unauthorized persistent access to your website by a malicious actor.

The attacker can inject spam content into your site, which can damage your site's reputation and SEO.

Given the high CVSS score of 9.8, the vulnerability poses a critical risk affecting confidentiality, integrity, and availability of your site.

Useful 0 Not Useful 0