CVE-2022-38104: Oxilab Accordions

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress.

Affected products

• Oxilab Accordions: before 2.1.0 (fixed in 2.1.0)

Published 2022-10-21. Last modified 2026-06-17.