Skip to content
OpenAdvisories

Product · burgersoftware

Button

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-1872

    Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode

    The Button plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.27 via deserialization of untrusted input in the button_shortcode function. This makes it possible for authenticated attackers, with contributor-le…

    burgersoftware Button Web / CMS