Stored Cross-Site Scripting Vulnerability in Advanced Accordion Gutenberg Block Plugin for WordPress

CVE-2025-2543

What is CVE-2025-2543?

The Advanced Accordion Gutenberg Block plugin for WordPress is susceptible to stored cross-site scripting attacks through SVG file uploads due to inadequate input sanitization and output escaping. This vulnerability allows authenticated users with Author-level access and above to inject harmful web scripts into pages, which can be executed whenever a visitor accesses the affected SVG file. Ensuring all versions of the plugin are updated is crucial to mitigate these risks and protect user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References