Login Request a demo
MA
Vendor
maxfoundry
6 products with CVEs on record
28
CVEs
0
On KEV
3
New 30D
Products
SS
Social Share Buttons
maxfoundry
7.1
3 CVEs0 on KEV2 new
MA
MaxGalleria
maxfoundry
7.1
2 CVEs0 on KEV1 new
MA
Maxbuttons
Maxfoundry
8.8
11 CVEs0 on KEV0 new
ML
Media Library Folders
maxfoundry
8.8
8 CVEs0 on KEV0 new
WP
WP-Paginate
maxfoundry
6.4
3 CVEs0 on KEV0 new
MC
MaxButtons – Create buttons
maxfoundry
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-100108
SS
Social Share Buttons
maxfoundry
6.4
0%
Oct 16Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting
CVE-2026-109702
SS
Social Share Buttons
maxfoundry
7.1
0%
Oct 15WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97260
MA
MaxGalleria
maxfoundry
7.1
0%
Oct 1WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-13245
MC
MaxButtons – Create buttons
maxfoundry
6.1
0%
Jun 27MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter
CVE-2021-47982
WP
WP-Paginate
maxfoundry
6.4
0%
Jun 8WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset
CVE-2026-2312
ML
Media Library Folders
maxfoundry
4.3
0%
Feb 14Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename
CVE-2025-0935
ML
Media Library Folders
Maxfoundry
4.3
0%
Feb 15The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on several AJAX actions in all versions up…
CVE-2024-8968
MA
Maxbuttons
Maxfoundry
4.7
0%
Dec 20MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color
CVE-2024-10555
MA
Maxbuttons
Maxfoundry
4.8
0%
Dec 20MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width
CVE-2024-9219
SS
Social Share Buttons
Maxfoundry
6.1
0%
Oct 19The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in…
CVE-2024-7858
ML
Media Library Folders
Maxfoundry
6.3
0%
Aug 30The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several AJAX functions in the media-library-plus.php file…
CVE-2024-7857
ML
Media Library Folders
Maxfoundry
6.5
0%
Aug 29The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter of the 'mlf_change_sort_type' AJAX action in all versions…
CVE-2024-6499
MA
Maxbuttons
Maxfoundry
5.3
0%
Aug 24The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8
CVE-2024-3026
MA
Maxbuttons
Maxfoundry
5.4
0%
Jul 13The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform…
CVE-2024-3615
ML
Media Library Folders
Maxfoundry
6.1
0%
Apr 19The Media Library Folders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 8.2.0 due to…
CVE-2024-31287
ML
Media Library Folders
Maxfoundry
6.5
1%
Apr 10Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from…
CVE-2024-30486
ML
Media Library Folders
Maxfoundry
8.8
1%
Mar 29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders:…
CVE-2023-7029
MA
Maxbuttons
Maxfoundry
5.4
0%
Feb 5The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including 9.7.6…
CVE-2023-6594
MA
Maxbuttons
Maxfoundry
4.8
0%
Jan 9The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.7.4 due to…
CVE-2023-36503
MA
Maxbuttons
Maxfoundry
5.4
0%
Jul 25Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions
CVE-2014-125092
MA
Maxbuttons
Maxfoundry
6.1
1%
Mar 5A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic
CVE-2022-41634
ML
Media Library Folders
Maxfoundry
8.8
0%
Nov 18Cross-Site Request Forgery (CSRF) vulnerability in Media Library Folders plugin <= 7.1.1 on WordPress
CVE-2022-38703
MA
Maxbuttons
Maxfoundry
4.8
1%
Sep 23Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress
CVE-2022-36346
MA
Maxbuttons
Maxfoundry
8.8
0%
Aug 22Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress
CVE-2022-2050
WP
Wp-paginate
Maxfoundry
4.8
1%
Jul 11The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when…
CVE-2022-25603
MA
Maxgalleria
Maxfoundry
4.8
1%
Mar 18Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5)
CVE-2021-4222
WP
Wp-paginate
Maxfoundry
4.8
1%
Feb 28The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks…
CVE-2014-7181
MA
Maxbuttons
Maxfoundry
–
2%
Oct 16Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id…