PatchTheCVEabc notation vulnerabilities and fixes
Recent CVEs affecting abc notation, with upgrade or downgrade steps. 2 tracked.
Also searched as: abcnotation.
abc notation has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-01-25. Highest priority: CVE-2024-13550 (score 41/100).
- CVE-2024-13551 MEDIUM 6.4 UPGRADE The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' sh
- CVE-2024-13550 MEDIUM 6.5 UPGRADE The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.
FAQ
How do I fix abc notation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is abc notation being exploited right now?
None of the tracked abc notation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which abc notation CVE should I patch first?
CVE-2024-13550 currently ranks highest (41/100): The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6..