CVE-2026-7472 | edmonparker Read More & Accordion Plugin up to 3.5.7 on WordPress ReadMoreData.php esc_sql orderby sql injection
A vulnerability classified as critical has been found in edmonparker Read More & Accordion Plugin up to 3.5.7 on WordPress. This issue affects the function esc_sql of the file ReadMoreData.php. Performing a manipulation of the argument orderby results in sql injection.
This vulnerability is reported as CVE-2026-7472. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.VulDB Recent EntriesRead More