Skip to content
PluginCanary

Accordions

by PickPlugins · 20,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 26 Oct 2026 with no patched version yet.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Accordions
Ownership100
Maintenance90
Security10
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-1Vulnerability published 26 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.26 Oct 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
pickplugins28 Nov 2016 to 8 Jun 2026, 322 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 months ago
Releases, 24 months
20
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Accordions
Q1 20241
Q2 20243
Q3 20243
Q4 20245
Q1 20254
Q2 20254
Q3 20251
Q4 20253
Q1 20264
Q2 20260
Q3 20260
Q4 20260

Last release 8 Jun 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Oct 2026Accordions <= 2.3.25 - Authenticated (Editor+) PHP Object Injection6.6<= 2.3.25No fixn/a
8 Jun 2026Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field6.4<= 2.3.232.3.25n/a
22 Sep 2025Accordion <= 2.3.15 - Missing Authorization4.3<= 2.3.152.3.1665
16 Sep 2025Accordion <= 2.3.14 - Missing Authorization4.3<= 2.3.142.3.1671
9 Apr 2025Accordion <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection8.8<= 2.3.112.3.1256
27 Sep 2024Accordion <= 2.2.99 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.992.2.1000
13 Mar 2024Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication5.4<= 2.2.962.2.970
17 Aug 2022Accordion <= 2.2.43 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 2.2.402.2.430
21 Apr 2021Accordion <= 2.2.29 - Reflected Cross-Site Scripting6.1< 2.2.302.2.30n/a
18 Mar 2020Accordion <= 2.2.8 - Unprotected AJAX Action to Stored/Reflected Cross-Site Scripting6.4< 2.2.92.2.9n/a

Source: Wordfence Intelligence.

Reputation

Average rating fell from 5.0 to 2.0 between Q3 2024 and Q1 2025.

Rating distribution
5 star75
4 star4
3 star0
2 star4
1 star7
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Accordions
4 May 2026249
11 May 2026425
18 May 2026406
25 May 2026453
1 Jun 2026343
8 Jun 20267,965
15 Jun 20261,093
22 Jun 2026822
29 Jun 2026684
6 Jul 20261,057
13 Jul 2026548
20 Jul 2026621
27 Jul 2026637
3 Aug 2026592
10 Aug 2026554
17 Aug 2026537
24 Aug 2026644
31 Aug 2026614
7 Sep 2026592
14 Sep 2026624
21 Sep 2026683
28 Sep 2026659
5 Oct 2026537
12 Oct 2026589
19 Oct 2026806
26 Oct 2026754
2 Nov 202698

Weekly downloads over the last 4 weeks are 36% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Read More Without RefreshScore 91 · 20,000+Custom Product Tabs for WooCommerce & WordPress Tabs Builder - Smart TabsScore 91 · 10,000+Easy Accordion Block - Accordion, FAQ & Collapsible Content for the Block EditorScore 91 · 7,000+Responsive Tabs - Horizontal, Vertical & Accordion Tabs for WordPressScore 91 · 2,000+Accordion ToggleScore 91 · 2,000+

Facts

Version2.3.25
AuthorPickPlugins
Added27 Oct 2014
Last updated8 Jun 2026
Active installs20,000+
Requires WordPress5.0
Tested up to7.0.8
Requires PHPnot stated
CategoryContent Management > Blog & Article Publishing
Tagstabs, AI FAQ, Accordion, image accordion, woocommerce faq tab

Other plugins by this author: Post Grid, Breadcrumb - Breadcrumb for WooCommerce and Custom Post Types, Product Slider, Product Grid, Product Masonry, Related Posts By PickPlugins, Social Share Button, Team Showcase, PickPlugins Pricing Table, Wishlist, ComboBlocks - Block Library & Page Builder, PickPlugins Mail Picker - Email Marketing & Newsletters

Questions

Is Accordions still maintained?

Accordions was last updated on 8 Jun 2026. Its Canary status is Avoid.

Is Accordions safe?

Accordions has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns Accordions?

The wordpress.org author is PickPlugins. Recent committers: pickplugins, paratheme, wpkids, plugin-master. We have recorded no ownership change.

What can I use instead of Accordions?

Plugins in the same category with a higher Canary Score: Read More Without Refresh, Custom Product Tabs for WooCommerce & WordPress Tabs Builder - Smart Tabs, Easy Accordion Block - Accordion, FAQ & Collapsible Content for the Block Editor, Responsive Tabs - Horizontal, Vertical & Accordion Tabs for WordPress, Accordion Toggle.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue