WP Abstracts

WP Abstracts has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 8 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 4 of the records (44%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

8 of the records (89%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

8 independent researchers contributed these findings, most of them (2) reported by qilin_99. WP Abstracts is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage89%

Open

Fixed

Get automatic notifications for all WP Abstracts vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32591

WP Abstracts <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

9 records


2025-09-03 00:00	Abstracts <= 2.7.4 - Unauthenticated Local File Inclusion WP Abstracts <= 2.7.4	`CVE-2025-48338`	8.1 High	timomangcut	Yes
2025-04-09 00:00	WP Abstracts <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting WP Abstracts <= 2.7.4	`CVE-2025-32591`	6.1 Medium	Abdi Pranata	No
2025-02-11 21:25	WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion WP Abstracts <= 2.7.3	`CVE-2024-12386`	8.1 High	SOPROBRO	Yes
2025-01-17 17:50	WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting WP Abstracts <= 2.7.2	`CVE-2024-12385`	6.1 Medium	vgo0	Yes
2024-10-24 00:00	WP Abstracts <= 2.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Abstracts <= 2.7.1	`CVE-2024-50411`	4.4 Medium	UKO	Yes
2024-09-23 00:00	WP Abstracts <= 2.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Abstracts <= 2.6.5	`CVE-2024-44045`	4.4 Medium	jsjp	Yes
2023-06-27 00:00	WP Abstracts <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Abstracts <= 2.6.2	`CVE-2023-28692`	4.4 Medium	qilin_99	Yes
2023-06-27 00:00	WP Abstracts <= 2.6.2 - Cross-Site Request Forgery WP Abstracts <= 2.6.2	`CVE-2023-36517`	4.3 Medium	qilin_99	Yes
2023-05-08 00:00	WP Abstracts <= 2.6.1 - Reflected Cross-Site Scripting WP Abstracts <= 2.6.1	`CVE-2023-29385`	6.1 Medium	LEE SE HYOUNG	Yes

Showing 1–9 of 9 reports

Latestv2.7.6

WP Abstracts

Author

Kevon Adonis

4.8(36)

96/100

Last Updated

2026-07-03 (2mo ago)

Active Installs

300+

Downloads

22,671

Requires WP

5.0+

Requires PHP

7.2+

Tested up to

WP 7.0.4

Created

2013-09-12 (13y ago)

Starting a new conference? Meet SimplyConf — our next-generation conference and abstract management plugin, rebuilt from the ground up with a modern interface. Existing WP Abstracts users are fully supported. Manage abstracts submissions on your site. Manage everything from events, abstracts, authors, reviews, attachments, email notifications and more. Authors submit abstracts and upload papers from the front-end while site administrators manage submissions and assigns reviewers from the admin panel. View view demo or get more information at wpabstracts.com For advance features including the option to assign unlimited reviewers, automated email alerts, email templates, reports, custom titles and headings, PDF and CSV exports and more get the pro version Current Language Support (more coming) – Spanish (Argentina, es_AR) – Spanish (Chile, es_CL) – Spanish (Spain, es_ES) – Greek (Greece, el) – Turkish (tr_TR) – Persian (Iran, fa_IR) – German (Germany, de_DE) – Portuguese (Brazil, pt_BR) – French (France, fr_FR) – Dutch (Netherlands, nl_NL)

View on WordPress.org