Skip to content
OpenAdvisories

Vendor

maxfoundry

18 known vulnerabilities.

Products

Media Library Folders 5 MaxButtons – Create buttons 4 Social Share Buttons 3 MaxGalleria 3 MaxA/B 1 MaxButtons 1 WP-Paginate 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-109702

    WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31.

    maxfoundry Social Share Buttons
  • High 7.1
    CVE-2026-97260

    WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions.

    maxfoundry MaxGalleria
  • High 7.1
    CVE-2025-28933

    WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in maxfoundry MaxA/B maxab allows Stored XSS.This issue affects MaxA/B: from n/a through <= 2.2.2.

    maxfoundry MaxA/B