https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12386.htmlhttps://patchthecve.com/cve/CVE-2024-12386.htmlWed, 17 Jun 2026 06:59:37 +0000HIGH 8.1: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request grantedhttps://patchthecve.com/cve/CVE-2024-12385.htmlhttps://patchthecve.com/cve/CVE-2024-12385.htmlWed, 17 Jun 2026 06:59:37 +0000MEDIUM 6.1: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers thttps://patchthecve.com/cve/CVE-2024-50411.htmlhttps://patchthecve.com/cve/CVE-2024-50411.htmlWed, 17 Jun 2026 08:04:24 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through <= 2.7.1.https://patchthecve.com/cve/CVE-2024-44045.htmlhttps://patchthecve.com/cve/CVE-2024-44045.htmlWed, 17 Jun 2026 07:52:12 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through <= 2.6.5.