CVE-2025-23825

CVE-2025-23825 is a Stored XSS in the WordPress plugin Easy Shortcode Buttons (affected up to version 1.2). Root cause: Improper neutralization of input during web page generation. Impact per provided metrics indicates low confidentiality, integrity, and availability impact. Red Hat and other con...

CVE-2025-23825 WordPress Easy Shortcode Buttons plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in osuthorpe Easy Shortcode Buttons easy-shortcode-buttons allows Stored XSS.This issue affects Easy Shortcode Buttons: from n/a through = 1.2...

WordPress Easy Shortcode Buttons plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Easy Shortcode Buttons versions = 1.2...

WordPress Simple shortcode buttons plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Simple shortcode buttons versions = 1.3.2...

CVE-2025-23825: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in osuthorpe Easy Shortcode Buttons easy-shortcode-buttons allows Stored XSS.This issue affects Easy Shortcode Buttons: from n/a through = 1.2...

PT-2025-5123 · WordPress · Easy Shortcode Buttons

Name of the Vulnerable Software and Affected Versions: Easy Shortcode Buttons versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

WordPress plugin Easy Shortcode Buttons has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Designs & Code Forget About Shortcode Buttons plugin = 2.1.2 versions...

CVE-2023-32579

CVE-2023-32579 affects the WordPress plugin Forget About Shortcode Buttons (designs & code) versions

CVE-2023-32579: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Designs & Code Forget About Shortcode Buttons plugin = 2.1.2 versions...

WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control

Software Forget About Shortcode Buttons Type Plugin Vulnerable versions = 2.1.2 Fixed in 2.1.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32579 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 97c2cfa92f61 Credits István Márton...

Wordpress forget-about-shortcode-buttons plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. get-about-shortcode-buttons is one of the plug-ins used to add CSS buttons in the post editor screen. A cross-site...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

Cross site scripting

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...

CVE-2016-1000133: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

PT-2016-4525

Name of the Vulnerable Software and Affected Versions wordpress plugin forget-about-shortcode-buttons version 1.1.1 Description The issue is related to a Reflected XSS in the wordpress plugin forget-about-shortcode-buttons. Recommendations For wordpress plugin forget-about-shortcode-buttons versi...