MaxButtons – Create buttons

Уязвимости

• CVE-2022-36346без авторизации · нужен клик≤ 9.2

  WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

  Высокий 8.8

• CVE-2026-13245без авторизации · нужен клик≤ 9.8.5

  MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter

  Средний 6.1

• CVE-2017-2169без авторизации · нужен клик

  Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to i

  Средний 6.1

• CVE-2025-39444высокие права≤ 9.8.3

  WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2023-7029участник+≤ 9.7.6

  WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

  Средний 5.4

• CVE-2023-36503участник+≤ 9.5.3

  WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2024-6499без авторизации≤ 9.7.8

  WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure

  Средний 5.3

• CVE-2023-6594админ≤ 9.7.4

  WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2022-38703админ≤ 9.2

  WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2014-7181

  Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject

  Средний 4.3