Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-53746 EUVD-2024-52078GHSA-fr57-5xm9-fpgw

WordPress Elementor Button Plus plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability

Published Dec 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Elementor Button Plus fd-elementor-button-plus allows Stored XSS.This issue affects Elementor Button Plus: from n/a through <= 1.3.9.

Affected products

VendorProductAffectedFixed
FlickDevs Elementor Button Plus ≤ 1.3.9 —

References