Hello.
We want to report a vulnerability discovered in Accordion WordPress plugin discovered by security researcher Robert DeVore.
The original report is available here: https://patchstack.com/database/report-preview/e2754134-ce86-40d2-942a-4b5c636339b6, and the PIN code to access the report information is here: TWaBxDnj5p8LrQyA
Note that we (Patchstack) are a CNA and provide a bug bounty program to security researchers. We do not ask for a reward and simply forward the details to you so it can get patched.
If you have any questions, please let us know. It would be great to get updates on the patching progress.
For general tips on how to patch a vulnerability, take a look here: https://patchstack.com/articles/common-plugin-vulnerabilities-how-to-fix-them/
Thank you. Have a nice day.
Hi Darius,
Thanks for your post.
We have resolved the issue and updated our plugin. Please inform us if you encounter any further problems.
Best regards