Input validation vulnerability in WP Abstracts 2.6.1

The WP Abstracts plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This type of vulnerability can be exploited by unauthenticated attackers, meaning they don’t need to log in to the system, and can run malicious code on pages that can be seen by other users if they can get them to click on a link. Versions of the plugin up to and including 2.6.1 are affected due to insufficient input sanitization and output escaping.