MaxButtons – Create buttons

Güvenlik açıkları

• CVE-2022-36346kimlik doğrulamasız · tıklama gerekir≤ 9.2

  WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

  Yüksek 8.8

• CVE-2026-13245kimlik doğrulamasız · tıklama gerekir≤ 9.8.5

  MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter

  Orta 6.1

• CVE-2017-2169kimlik doğrulamasız · tıklama gerekir

  Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to i

  Orta 6.1

• CVE-2025-39444yüksek yetki≤ 9.8.3

  WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2023-7029katılımcı+≤ 9.7.6

  WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

  Orta 5.4

• CVE-2023-36503katılımcı+≤ 9.5.3

  WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-6499kimlik doğrulamasız≤ 9.7.8

  WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure

  Orta 5.3

• CVE-2023-6594yönetici≤ 9.7.4

  WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2022-38703yönetici≤ 9.2

  WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2014-7181

  Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject

  Orta 4.3