CVE-2024-0711

The Buttons Shortcode and Widget WordPress plugin, versions 1.16 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate and escape certain shortcode attributes before they are outputted back in a page or post where the shortcode is em...

CVE-2024-24930

CVE-2024-24930 is a stored XSS in the WordPress Buttons Shortcode and Widget plugin (