CVE-2026-1904 | Simple Wp Colorfull Accordion Plugin up to 1.0 on WordPress Shortcode Title cross site scripting

A vulnerability described as problematic has been identified in Simple Wp Colorfull Accordion Plugin up to 1.0 on WordPress. The impacted element is an unknown function of the component Shortcode Handler. The manipulation of the argument Title results in cross site scripting.

This vulnerability is cataloged as CVE-2026-1904. The attack may be launched remotely. There is no exploit available.