Lucene search

K
KevonadonisWp Abstracts

5 matches found

CVE
CVE
added 2025/02/12 12:15 p.m.41 views

CVE-2024-12386

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request grante...

8.1CVSS7.8AI score0.0002EPSS
CVE
CVE
added 2024/10/06 12:15 p.m.38 views

CVE-2024-44045

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a through 2.6.5.

5.9CVSS6.1AI score0.00079EPSS
CVE
CVE
added 2025/01/18 7:15 a.m.36 views

CVE-2024-12385

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers ...

6.1CVSS6.5AI score0.00022EPSS
CVE
CVE
added 2024/10/29 9:15 a.m.35 views

CVE-2024-50411

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a through 2.7.1.

5.9CVSS5.7AI score0.00047EPSS
CVE
CVE
added 2023/08/30 4:15 p.m.31 views

CVE-2023-28692

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin

5.9CVSS4.9AI score0.00058EPSS