WordPress plugin
ABC Notation security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All ABC Notation vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤6.1.3No patch available | CVE-2025-31895 | |
| Medium6.5 | Authenticated (Contributor+) Arbitrary File Read ≤6.1.3No patch available | CVE-2024-13550 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤6.1.3No patch available | CVE-2024-13551 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.1.3No patch available
- Medium6.5Authenticated (Contributor+) Arbitrary File Read
≤6.1.3No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.1.3No patch available
ABC Notation: common questions
Does ABC Notation have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in ABC Notation: 3 medium. At least one is not fixed in the latest version.
How do I check which version of ABC Notation I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent ABC Notation vulnerability?
CVE-2025-31895, published Apr 1, 2025: ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any ABC Notation vulnerability listed in CISA KEV?
No. None of the known ABC Notation vulnerabilities is currently listed in the CISA KEV catalog.