WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
business-profile-reviews
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
business-reviews-wp
Published
2025-07-07
Title
Widget for Google Reviews < 1.0.16 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
Slug
business-reviews-wp
Published
2025-07-16
Title
Widget for Google Reviews < 1.0.16 - Unauthenticated Local File Inclusion
Slug
button
Published
2023-05-12
Title
Button < 1.1.24 - Admin+ Stored XSS
Slug
button
Published
2024-03-28
Title
Button < 1.1.28 - Contributor+ PHP Object Injection in button_shortcode
Slug
button-block
Published
2024-11-20
Title
Button Block – Get fully customizable & multi-functional buttons < 1.1.5 - Authenticated (Contributor+) Post Disclosure
Slug
button-block
Published
2024-12-18
Title
Button Block – Get fully customizable & multi-functional buttons < 1.1.6 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Slug
button-block
Published
2025-01-07
Title
Button Block < 1.2.0 - Contributor+ Stored XSS
Slug
button-block
Published
2025-01-13
Title
Button Block < 1.1.6 - Missing Authorization
Slug
button-block
Published
2025-07-30
Title
Button Block < 1.2.1 - Cross-Site Request Forgery
Slug
button-block
Published
2026-10-26
Title
Button Block – Stylish buttons that get more clicks < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
button-contact-vr
Published
2024-05-02
Title
Button contact VR < 4.7.7 - Admin+ Stored XSS
Slug
button-contact-vr
Published
2024-08-16
Title
Button contact VR < 4.7.8 - Admin+ Stored XSS
Slug
button-contact-vr
Published
2024-10-24
Title
Button contact VR < 4.7.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
button-generation
Published
2021-12-05
Title
Button Generator < 2.3.3 - RFI leading to RCE via CSRF
Slug
button-generation
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
button-generation
Published
2023-03-02
Title
Button Generator - easily Button Builder < 2.3.4 - Admin+ Stored XSS
Slug
button-generation
Published
2023-05-25
Title
Button Generator – easily Button Builder < 2.3.6 - Cross-Site Request Forgery
Slug
button-generation
Published
2023-11-28
Title
Button Generator < 2.3.9 - Unauthenticated Button Counter Reset
Slug
button-generation
Published
2023-11-28
Title
Button Generator < 2.3.9 - Button Counter Reset via CSRF
Slug
button-generation
Published
2024-04-11
Title
Button Generator < 3.0 - Button Deletion via CSRF
Slug
button-generation
Published
2025-01-24
Title
Button Generator – easily Button Builder < 3.1.2 - Cross-Site Request Forgery
Slug
buttoner-elementor
Published
2025-12-11
Title
Buttoner for Elementor <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
buttonizer-multifunctional-button
Published
2021-11-29
Title
Buttonizer - Smart Floating Action Button < 2.5.5 - Admin+ Stored Cross-Site Scripting
Slug
buttonizer-multifunctional-button
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius