MaxButtons vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MA

Product

MaxButtons

by maxfoundry · last CVE Apr 17, 2025

12

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 1Medium 10Low 0

Severity

All severities12 Critical0 High1 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add MaxButtons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-36346	8.8	0%	Aug 22	Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress Affected: through 9.2
CVE-2014-125092	6.1	1%	Mar 5	A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic Affected: before 1.26.1
CVE-2025-39444	5.9	0%	Apr 17	WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability Affected: through 9.8.3
CVE-2024-3026	5.4	0%	Jul 13	The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform… Affected: before 9.7.8
CVE-2023-7029	5.4	0%	Feb 5	The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including 9.7.6… Affected: before 9.7.7
CVE-2023-36503	5.4	0%	Jul 25	Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions Affected: through 9.5.3
CVE-2024-6499	5.3	0%	Aug 24	The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8 Affected: before 9.8.0
CVE-2024-10555	4.8	0%	Dec 20	MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width Affected: before 9.8.1
CVE-2023-6594	4.8	0%	Jan 9	The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.7.4 due to… Affected: through 9.7.4
CVE-2022-38703	4.8	1%	Sep 23	Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress Affected: through 9.2
CVE-2024-8968	4.7	0%	Dec 20	MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color Affected: before 9.8.1
CVE-2014-7181	–	2%	Oct 16	Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id… Affected: 1.26.0