/Vulnerability Library

Advance Post Prefix WordPress plugin - Reflected XSS

CVE-2024-12734
Verified

Description

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request.

Severity

Medium

CVSS Score

6.1

Exploit Probability

1%

Affected Product

advance_post_prefix

Published Date

February 5, 2026

Template Author

sourabh-sahu

CVE-2024-12734.yaml
6.1Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2024-12734
CWE ID:
cwe-79

References

https://wpscan.com/vulnerability/038b44dc-0495-4f56-ae7e-c78a265aa535/https://nvd.nist.gov/vuln/detail/cve-2024-12734

Remediation Steps

Update to the latest version of Advance Post Prefix WordPress plugin.