WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WP Abstracts

Manage conferences, abstracts submission, authors, reviews, attachments, email notifications and more.

9Reported vulnerabilities
8.1Highest CVSS score
2.7.6Latest version
300+Active installs

What to do now

Update WP Abstracts to 2.7.5 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 3, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-48338 High 8.1 0.4% 2.7.4 and earlier 2.7.5 September 3, 2025
CVE-2025-32591 Medium 6.1 0.2% 2.7.4 and earlier — April 9, 2025
CVE-2024-12385 Medium 6.1 0.2% 0 to 2.7.2 (inclusive) 2.7.3 January 18, 2025
CVE-2023-29385 Medium 6.1 0.4% 2.6.1 and earlier 2.6.2 May 8, 2023
CVE-2024-12386 Medium 5.4 0.2% Before 2.7.4 2.7.4 February 12, 2025
CVE-2024-50411 Medium 4.4 0.3% 2.7.1 and earlier 2.7.2 October 24, 2024
CVE-2024-44045 Medium 4.4 0.3% 2.6.5 and earlier 2.7.0 September 23, 2024
CVE-2023-28692 Medium 4.4 0.5% 2.6.2 and earlier 2.6.3 June 27, 2023
CVE-2023-36517 Medium 4.3 0.3% 2.6.2 and earlier 2.6.3 June 27, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.