CVE-2026-0635 - Responsive Accordion Slider <= 1.2.2 - missing authorization to authenticated (co

CVE ID : CVE-2026-0635 Published : Jan. 14, 2026, 6:15 a.m. | 1 hour, 17 minutes ago Description : The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resp_accordion_silder_save_images' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to modify any slider's image metadata including titles, descriptions, alt text, and links. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor