Maxbuttons Security Vulnerabilities and Issues — Maxbuttons CVE List

Lucene search

MaxfoundryMaxbuttons

3 matches found

CVE•added 2024/07/13 6:15 a.m.•43 views

CVE-2024-3026

The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

5.4CVSS5.5AI score0.00097EPSS

CVE•added 2025/04/17 4:15 p.m.•43 views

CVE-2025-39444

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maxfoundry MaxButtons allows Stored XSS.This issue affects MaxButtons: from n/a through 9.8.3.

5.9CVSS6.1AI score0.00042EPSS

CVE•added 2024/08/24 4:15 a.m.•41 views

CVE-2024-6499

The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabi...

5.3CVSS5.3AI score0.00384EPSS