What’s Vulnerable › Products
maxfoundry MaxButtons – Create buttons vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your maxfoundry MaxButtons – Create buttons version is affected
Latest maxfoundry MaxButtons – Create buttons vulnerabilities
- CVE-2026-13245 — MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter (CVSS 6.1)
- CVE-2025-39444 — WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- CVE-2024-8968 — MaxButtons < 9.8.1 - Admin+ Stored XSS via Text Color (CVSS 4.7)
- CVE-2024-10555 — MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width (CVSS 4.8)
- CVE-2024-6499 — WordPress Button Plugin MaxButtons <= 9.7.8 - Full Path Disclosure (CVSS 5.3)
- CVE-2024-3026 — WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS (CVSS 5.4)
- CVE-2023-7029 — WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode (CVSS 5.4)
- CVE-2023-6594 — WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2023-36503 — WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2014-125092 — MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting (CVSS 6.1)
- CVE-2022-38703 — WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2022-36346 — WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (CVSS 8.8)
- CVE-2014-7181 — (CVSS 4.3)