WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
button-block
Published
2025-01-07
Title
Button Block < 1.2.0 - Contributor+ Stored XSS
Slug
button-block
Published
2025-01-13
Title
Button Block < 1.1.6 - Missing Authorization
Slug
button-block
Published
2025-07-30
Title
Button Block < 1.2.1 - Cross-Site Request Forgery
Slug
button-contact-vr
Published
2024-05-02
Title
Button contact VR < 4.7.7 - Admin+ Stored XSS
Slug
button-contact-vr
Published
2024-08-16
Title
Button contact VR < 4.7.8 - Admin+ Stored XSS
Slug
button-contact-vr
Published
2024-10-24
Title
Button contact VR < 4.7.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
button-generation
Published
2021-12-05
Title
Button Generator < 2.3.3 - RFI leading to RCE via CSRF
Slug
button-generation
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
button-generation
Published
2023-03-02
Title
Button Generator - easily Button Builder < 2.3.4 - Admin+ Stored XSS
Slug
button-generation
Published
2023-05-25
Title
Button Generator – easily Button Builder < 2.3.6 - Cross-Site Request Forgery
Slug
button-generation
Published
2023-11-28
Title
Button Generator < 2.3.9 - Unauthenticated Button Counter Reset
Slug
button-generation
Published
2023-11-28
Title
Button Generator < 2.3.9 - Button Counter Reset via CSRF
Slug
button-generation
Published
2024-04-11
Title
Button Generator < 3.0 - Button Deletion via CSRF
Slug
button-generation
Published
2025-01-24
Title
Button Generator – easily Button Builder < 3.1.2 - Cross-Site Request Forgery
Slug
buttoner-elementor
Published
2025-12-11
Title
Buttoner for Elementor <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
buttonizer-multifunctional-button
Published
2021-11-29
Title
Buttonizer - Smart Floating Action Button < 2.5.5 - Admin+ Stored Cross-Site Scripting
Slug
buttonizer-multifunctional-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
buttonizer-multifunctional-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buttons-shortcode-and-widget
Published
2024-02-09
Title
Buttons Shortcode and Widget <= 1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
buttons-shortcode-and-widget
Published
2024-02-20
Title
Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcode
Slug
buttons-x
Published
2023-04-18
Title
Button Builder - Buttons X <= 0.8.6 - Contributor+ Stored XSS
Slug
bux-woocommerce
Published
2025-05-18
Title
Bux Woocommerce <= 1.2.3 - Missing Authorization
Slug
buy-now-pay-later-addi
Published
2026-03-10
Title
Addi – Cuotas que se adaptan a ti <= 2.0.4 - Missing Authorization
Slug
buy-now-plus
Published
2026-01-27
Title
Buy Now Plus < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Export