Elite Accordion Security & Risk Analysis

wordpress.org/plugins/elite-accordion

This plugin will add an expand collapse accordion feature inside a post or page.

200 active installs v1.0.0 PHP + WP 3.9+ Updated Nov 2, 2014
accordionadd-collapseelite-accordionjquery-accordionpost-accordion
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Elite Accordion Safe to Use in 2026?

Generally Safe

Score 85/100

Elite Accordion has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The "elite-accordion" v1.0.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, raw SQL queries, unescaped output, file operations, and external HTTP requests is a significant strength. Furthermore, the plugin correctly utilizes prepared statements for all its SQL queries and ensures output is properly escaped, mitigating common injection and XSS vulnerabilities.

The attack surface is minimal, with only two shortcodes identified as entry points. Crucially, both of these shortcodes have capability checks implemented, indicating an effort to control access to their functionality. The taint analysis revealed no unsanitized paths, further reinforcing the plugin's safety against common input validation flaws.

The vulnerability history being completely clear with zero recorded CVEs, across all severity levels and types, is a highly positive indicator. This suggests a developer who is either very diligent in their security practices or has not yet attracted security researchers' attention. While the plugin demonstrates good practices, the lack of any nonce checks on the identified shortcodes could be a potential area for minor improvement, although in this specific instance with capability checks, the immediate risk is low.

Key Concerns

  • No nonce checks on shortcodes
Vulnerabilities
None known

Elite Accordion Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Elite Accordion Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Elite Accordion Attack Surface

Entry Points2
Unprotected0

Shortcodes 2

[eliteaccordion] index.php:78
[elitetoggle] index.php:87
WordPress Hooks 7
filtermce_external_pluginsindex.php:23
filtermce_buttonsindex.php:24
actionadmin_headindex.php:27
actioninitindex.php:47
actionwp_enqueue_scriptsindex.php:56
actionwp_enqueue_scriptsindex.php:62
actionwp_headindex.php:72
Maintenance & Trust

Elite Accordion Maintenance & Trust

Maintenance Signals

WordPress version tested4
Last updatedNov 2, 2014
PHP min version
Downloads10K

Community Trust

Rating66/100
Number of ratings3
Active installs200
Developer Profile

Elite Accordion Developer Profile

pprothim0

1 plugin · 200 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Elite Accordion

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/elite-accordion/js/mce-button.js/wp-content/plugins/elite-accordion/js/main.js/wp-content/plugins/elite-accordion/js/modernizr.js/wp-content/plugins/elite-accordion/css/elite_style.css
Script Paths
/wp-content/plugins/elite-accordion/js/mce-button.js/wp-content/plugins/elite-accordion/js/main.js/wp-content/plugins/elite-accordion/js/modernizr.js
Version Parameters
elite-accordion/js/main.js?ver=1.0elite-accordion/js/modernizr.js?ver=1.0

HTML / DOM Fingerprints

CSS Classes
accordionpanel-titlepanel-content
Shortcode Output
<div class="accordion"><h3 class="panel-title"></h3> <div class="panel-content"><p>
FAQ

Frequently Asked Questions about Elite Accordion