Skip to content
Noroxi

maxfoundry records

23 published records for vendor maxfoundry.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
34.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2024-30486
    35Monitor

    WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    maxfoundry · media library foldersMar 29, 2024

  • CVE-2022-36346
    35Monitor

    WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    maxfoundry · maxbuttonsAug 22, 2022

  • CVE-2022-41634
    35Monitor

    WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    maxfoundry · media library foldersNov 18, 2022

  • CVE-2024-31287
    26Monitor

    WordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    maxfoundry · media library foldersApr 10, 2024

  • CVE-2024-7857
    26Monitor

    Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    maxfoundry · media library foldersAug 28, 2024

  • CVE-2024-7858
    25Monitor

    Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions

    MediumCVSS 6.3No exploitEPSS 0%

    maxfoundry · media library foldersAug 30, 2024

  • CVE-2014-125092
    24Monitor

    MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting

    MediumCVSS 6.1No exploitEPSS 1%

    maxfoundry · maxbuttonsMar 5, 2023

  • CVE-2024-9219
    24Monitor

    WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    maxfoundry · social share buttonsOct 19, 2024

  • CVE-2024-3615
    24Monitor

    Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'

    MediumCVSS 6.1No exploitEPSS 0%

    maxfoundry · media library foldersApr 18, 2024

  • CVE-2024-3026
    21Monitor

    WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    maxfoundry · maxbuttonsJul 13, 2024

  • CVE-2024-6499
    21Monitor

    WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    maxfoundry · maxbuttonsAug 24, 2024

  • CVE-2023-7029
    21Monitor

    WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    maxfoundry · maxbuttonsFeb 5, 2024

  • CVE-2023-36503
    21Monitor

    WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    maxfoundry · maxbuttonsJul 25, 2023

  • CVE-2021-4222
    19Monitor

    WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    maxfoundry · wp-paginateFeb 28, 2022

  • CVE-2022-2050
    19Monitor

    WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    maxfoundry · wp-paginateJul 11, 2022

  • CVE-2022-25603
    19Monitor

    WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    maxfoundry · maxgalleriaMar 18, 2022

  • CVE-2022-38703
    19Monitor

    WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    maxfoundry · maxbuttonsSep 23, 2022

  • CVE-2024-10555
    19Monitor

    MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width

    MediumCVSS 4.8No exploitEPSS 0%

    maxfoundry · maxbuttonsDec 20, 2024

  • CVE-2023-6594
    19Monitor

    WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    maxfoundry · maxbuttonsJan 8, 2024

  • CVE-2014-7181
    18Monitor

    Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject

    MediumCVSS 4.3No exploitEPSS 2%

    maxfoundry · maxbuttonsOct 16, 2014

  • CVE-2024-8968
    18Monitor

    MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color

    MediumCVSS 4.7No exploitEPSS 0%

    maxfoundry · maxbuttonsDec 20, 2024

  • CVE-2024-3581
    17Monitor

    MaxGalleria <= 6.4.2 - Missing Authorization

    MediumCVSS 4.3No exploitEPSS 1%

    maxfoundry · maxgalleriaMay 2, 2024

  • CVE-2025-0935
    17Monitor

    Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change

    MediumCVSS 4.3No exploitEPSS 0%

    maxfoundry · media library foldersFeb 15, 2025