CVE-2024-13639CVSS 4.3Web
CVE-2024-13639: read more \& accordion vulnerability
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary 'read more' posts.
- CVSS
- 4.3 MEDIUM
- EPSS
- 24.67%
- Known exploited
- not in KEV
- Product
- read more \& accordion
What is known
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the expmDeleteData() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary 'read more' posts.