Vulnerabilities

TI-2025-30664 CVE-2025-48338 · GHSA-qm5r-jf88-f5fv

WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows PHP Local File Inclusion.This iss…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00461 Published 2025-10-22 No fix listed CWE-98

TI-2025-23656 CVE-2025-32591 · GHSA-r4xq-444j-73wr

WordPress WP Abstracts Plugin <= 2.7.5 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Cross Site Request Forgery.This issue affects WP Abstracts: from n/a through <= 2.7.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

TI-2024-11491 CVE-2024-12386 · GHSA-6qrg-7xmr-hj3w

WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion

LOW 35

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00221 Published 2025-02-12 No fix listed CWE-352

TI-2024-11490 CVE-2024-12385 · GHSA-c464-74xq-gmmw

WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

LOW 27

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00206 Published 2025-01-18 No fix listed CWE-352

TI-2024-33844 CVE-2024-50411 · GHSA-9x3x-8pcp-wvrj

WordPress WP Abstracts plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-29 No fix listed CWE-79

TI-2024-29634 CVE-2024-44045 · GHSA-qpf3-837j-ppgx

WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79

TI-2023-13209 CVE-2023-28692 · GHSA-w497-6grf-xhgw

WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0047 Published 2023-08-30 No fix listed CWE-79

TI-2023-18356 CVE-2023-36517 · GHSA-5frc-5hff-63hp

WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352

TI-2023-13775 CVE-2023-29385 · GHSA-m6v9-wcc8-cp55

WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-12 No fix listed CWE-79

Vulnerabilities

Filters