Login Request a demo
MA
Product
MaxButtons
by maxfoundry · last CVE Apr 17, 2025
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 1Medium 10Low 0
Severity
All severities12Critical0High1Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MaxButtons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-125092
6.1
1%
Mar 5
A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic
Affected: before 1.26.1
CVE-2025-39444
5.9
0%
Apr 17
WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 9.8.3
CVE-2024-3026
5.4
0%
Jul 13
The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform…
Affected: before 9.7.8
CVE-2023-7029
5.4
0%
Feb 5
The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including 9.7.6…
Affected: before 9.7.7
CVE-2023-36503
5.4
0%
Jul 25
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions
Affected: through 9.5.3
CVE-2024-6499
5.3
0%
Aug 24
The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8
Affected: before 9.8.0
CVE-2024-10555
4.8
0%
Dec 20
MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width
Affected: before 9.8.1
CVE-2023-6594
4.8
0%
Jan 9
The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.7.4 due to…
Affected: through 9.7.4
CVE-2022-38703
4.8
1%
Sep 23
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress
Affected: through 9.2
CVE-2024-8968
4.7
0%
Dec 20
MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color
Affected: before 9.8.1
Showing 10