5 matches found
CVE-2023-49155
CVE-2023-49155 is a CSRF vulnerability in the WordPress plugin Button Generator – easily Button Builder. Affected versions are
CVE-2023-2362
CVE-2023-2362 is a reflected XSS affecting multiple WordPress plugins from Wow-Company (e.g., Float menu, Bubble Menu, Button Generator, Calculator Builder, Counter Box, Floating Button, Herd Effects, Popup Box, Side Menu Lite, Sticky Buttons, Wow Skype Buttons, WP Coder). Root cause: page parame...
CVE-2021-25052
CVE-2021-25052 affects the WordPress Button Generator plugin (pre-2.3.3) in the wow-company admin menu. A flaw in how include() handles PHP files (and data:///http:// resources) enables remote file inclusion, which can lead to CSRF and remote code execution. Remediation: upgrade to version 2.3.3 ...
CVE-2024-3471
The Button Generator WordPress plugin, affecting versions prior to 3.0 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a missing CSRF check during the bulk delete operation. This flaw could allow an attacker to trick a logged-in administrator into deleting buttons...