CVE-2023-36517

CVE-2023-36517 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Abstracts/Manuscripts Manager plugin for WordPress (Kevon Adonis WP Abstracts) affecting versions

CVE-2024-12386

The CVE-2024-12386 entry concerns the WP Abstracts WordPress plugin (prevalent versions up to 2.7.3) and documents a Cross-Site Request Forgery (CSRF) flaw caused by missing nonce validation in multiple functions. Exploitation requires an administrator to perform an action (e.g., click a forged l...

CVE-2024-44045

CVE-2024-44045 is a stored XSS vulnerability in the WordPress plugin WP Abstracts (Kevon Adonis WP Abstracts). Affected versions are <= 2.6.5. The issue stems from improper input neutralization during web page generation (XSS), enabling stored script execution on affected pages. According to P...

CVE-2024-12385

The CVE-2024-12385 entry concerns the WP Abstracts WordPress plugin. The connected Red Hat entry confirms a Cross-Site Request Forgery flaw in WP Abstracts up to version 2.7.2, caused by missing nonce validation in wpabstracts_load_status() and wpabstracts_delete_abstracts(). This could allow una...

CVE-2024-50411

CVE-2024-50411 affects the WordPress plugin WP Abstracts (vulnerable: n/a through 2.7.1). Root cause: improper input neutralization during page generation, allowing Stored XSS. Impact: stored cross-site scripting as described in sources; risk depends on exploitation context. Remediation: fix rele...

CVE-2023-28692

CVE-2023-28692 affects the WordPress WP Abstracts plugin (Kevon Adonis) ≤ 2.6.3. The vulnerability is a stored XSS that requires admin+ privileges. Multiple sources (WP Vulnerability DB, Red Hat, Patchstack) confirm the vulnerable version range and indicate the fix is available in 2.6.4. Impact i...

CVE-2023-29385

The CVE-2023-29385 entry describes an unauthenticated, reflected XSS vulnerability in the WP Abstracts plugin for WordPress (Kevon Adonis WP Abstracts) affecting versions up to and including 2.6.2. The root cause is insufficient sanitization/escaping of input, enabling a reflected XSS when user-c...