Skip to content
OpenAdvisories

Vendor

Kevon Adonis

9 known vulnerabilities.

Products

WP Abstracts 9
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-12385

    WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

    The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it…

    Kevon Adonis WP Abstracts Web / CMS
  • Medium 5.9
    CVE-2024-50411

    WordPress WP Abstracts plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through <= 2.7.1.

    Kevon Adonis WP Abstracts
  • Medium 5.9
    CVE-2024-44045

    WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through <= 2.6.5.

    Kevon Adonis WP Abstracts
  • Medium 5.9
    CVE-2023-28692

    WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.3 versions.

    Kevon Adonis WP Abstracts
  • Medium 4.3
    CVE-2023-36517

    WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

    Kevon Adonis WP Abstracts