CVE-2023-49155

CVE-2023-49155 is a CSRF vulnerability in the WordPress plugin Button Generator – easily Button Builder. Affected versions are

CVE-2023-2362

CVE-2023-2362 is a reflected XSS affecting multiple WordPress plugins from Wow-Company (e.g., Float menu, Bubble Menu, Button Generator, Calculator Builder, Counter Box, Floating Button, Herd Effects, Popup Box, Side Menu Lite, Sticky Buttons, Wow Skype Buttons, WP Coder). Root cause: page parame...

CVE-2021-25052

CVE-2021-25052 affects the WordPress Button Generator plugin (pre-2.3.3) in the wow-company admin menu. A flaw in how include() handles PHP files (and data:///http:// resources) enables remote file inclusion, which can lead to CSRF and remote code execution. Remediation: upgrade to version 2.3.3 ...

CVE-2024-3471

CVE-2024-3471 affects the WordPress Button Generator plugin: versions prior to 3.0 lack CSRF protection for bulk deletion, enabling CSRF-based admin button deletions by an authenticated user. Red Hat and Patchstack corroborate the issue; remediation is to upgrade to version 3.0 or apply vendor-re...

CVE-2023-25443

CVE-2023-25443 is a CSRF vulnerability in the WordPress Button Generator – easily Button Builder plugin, affecting versions