Skip to content
OpenAdvisories

Product · maxfoundry

MaxButtons – Create buttons

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-13245

    MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter

    The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' parameter in all versions up to, and including, 9.8.5 due to insufficient input sanitization and output escaping. This makes it possible for un…

    maxfoundry MaxButtons – Create buttons Web / CMS
  • Medium 5.3
    CVE-2024-6499

    WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure

    The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to…

    maxfoundry MaxButtons – Create buttons Web / CMS
  • Medium 6.4
    CVE-2023-7029

    WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including 9.7.6 due to insufficient input sanitization and output escaping on user supplied attri…

    maxfoundry MaxButtons – Create buttons Web / CMS
  • Medium 4.4
    CVE-2023-6594

    WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.7.4 due to insufficient input sanitization and output escaping. This makes it possible for auth…

    maxfoundry MaxButtons – Create buttons Web / CMS