Skip to content
Sign in
5.4 Medium

CVE-2024-3026 The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which…

Description

The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
MaxButtons 9.7 earliest → < 9.7.8 9.7.8
WordPress Button Plugin MaxButtons 9.7 earliest → < 9.7.8 9.7.8

Other CVEs of MaxButtons

The 3 CVEs of MaxButtons →
CVE-2025-39444 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry… 5.9 Medium CVE-2024-6499 The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to,… 5.3 Medium
Track this CVE