CVE-2026-6443
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Apr 17, 2026
Vendor
unknown
Description
The Accordion and Accordion Slider plugin for WordPress is vulnerable to an injected backdoor in version 1.4.6. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.