CVE-2026-15652 - Easy Accordion <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Block Attribute

CVE ID :CVE-2026-15652 Published : July 16, 2026, 4:17 a. m. | 38 minutes ago Description :The Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'align' Block Attribute in all versions up to, and including, 3.

1. 6 due to insufficient input sanitization and output escaping.