Skip to content
OpenAdvisories
Low · 3.4 CVE-2022-38703 EUVD-2022-41272GHSA-rrrr-cw7x-rf7j

WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Max Foundry Product: WordPress Button Plugin MaxButtons (WordPress plugin) Category: Web / CMS

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress

Affected products

VendorProductAffectedFixed
Max Foundry WordPress Button Plugin MaxButtons (WordPress plugin) <= 9.2 – ≤ 9.2 —

References