Vulnerabilities

TI-2024-11491 CVE-2024-12386 · GHSA-6qrg-7xmr-hj3w

WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion

LOW 35

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00221 Published 2025-02-12 No fix listed CWE-352

TI-2024-11490 CVE-2024-12385 · GHSA-c464-74xq-gmmw

WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

LOW 27

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00206 Published 2025-01-18 No fix listed CWE-352

TI-2024-33844 CVE-2024-50411 · GHSA-9x3x-8pcp-wvrj

WordPress WP Abstracts plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-29 No fix listed CWE-79

TI-2024-29634 CVE-2024-44045 · GHSA-qpf3-837j-ppgx

WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79

TI-2023-13209 CVE-2023-28692 · GHSA-w497-6grf-xhgw

WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0047 Published 2023-08-30 No fix listed CWE-79

TI-2023-18356 CVE-2023-36517 · GHSA-5frc-5hff-63hp

WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352

TI-2023-13775 CVE-2023-29385 · GHSA-m6v9-wcc8-cp55

WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-12 No fix listed CWE-79