WP Accordion Security & Risk Analysis

wordpress.org/plugins/my-accordion

This plugin will add an expand collapse accordion feature inside a post or page.

100 active installs v1.1 PHP + WP 3.0.1+ Updated Feb 20, 2017
accordionjquery-accordion
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Accordion Safe to Use in 2026?

Generally Safe

Score 85/100

WP Accordion has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The 'my-accordion' plugin v1.1 demonstrates a strong security posture based on the provided static analysis. The complete absence of dangerous functions, raw SQL queries, unescaped output, file operations, and external HTTP requests is highly commendable. The fact that all SQL queries utilize prepared statements and all identified outputs are properly escaped indicates good development practices in these critical areas. Furthermore, the plugin's attack surface is minimal, with only two shortcodes and no AJAX handlers or REST API routes, and importantly, no unprotected entry points are identified. The lack of any recorded vulnerabilities or CVEs in its history further bolsters its security reputation, suggesting a mature and well-maintained codebase.

Key Concerns

  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

WP Accordion Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Accordion Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

WP Accordion Attack Surface

Entry Points2
Unprotected0

Shortcodes 2

[accordian] plugin-hook.php:75
[toggle] plugin-hook.php:88
WordPress Hooks 4
actionwp_enqueue_scriptsplugin-hook.php:47
filtermce_external_pluginsplugin-hook.php:54
filtermce_buttonsplugin-hook.php:55
actioninitplugin-hook.php:67
Maintenance & Trust

WP Accordion Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38
Last updatedFeb 20, 2017
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs100
Developer Profile

WP Accordion Developer Profile

Sohelwpexpert

10 plugins · 190 total installs

78
trust score
Avg Security Score
86/100
Avg Patch Time
50 days
View full developer profile
Detection Fingerprints

How We Detect WP Accordion

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/my-accordion/style.css/wp-content/plugins/my-accordion/main.js
Script Paths
/wp-content/plugins/my-accordion/main.js
Version Parameters
my-accordion/style.css?ver=my-accordion/main.js?ver=

HTML / DOM Fingerprints

CSS Classes
accordiantoggletoggle-contentarrow
Data Attributes
data-open
Shortcode Output
<div class="accordian"><h5 class="toggle<a href="#"><span class="arrow"></span><div class="toggle-content
FAQ

Frequently Asked Questions about WP Accordion