Description
Cross-Site Request Forgery (CSRF) vulnerability in kevmimcc Kevin's kevins-plugin allows Stored XSS.This issue affects Kevin's: from n/a through <= 2.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kevmimcc | Kevin's | ≤ 2.0.0 | — |
High · 7.1
CVE-2024-53712
EUVD-2024-52045GHSA-xmr8-m3g7-8q7w
WordPress Kevin's plugin <= 2.0.0 - CSRF to Stored XSS vulnerability
Published Dec 2, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack