The WordPress Button Plugin MaxButtons WordPress plugin was affected by a Cross Site Scripting (XSS) security vulnerability.
packetstormsecurity.com/files/128693/
www.immuniweb.com/advisory/HTB23237