CVE-2022-36346

Description

References

• patchstack.com/database/vulnerability/maxbuttons/wordpress-maxbuttons-plugins-9-2-multiple-cross-site-request-forgery-csrf-vulnerabilities · Patch
• wordpress.org/plugins/maxbuttons · Release Notes

Más vulnerabilidades de maxbuttons

• CVE-2024-8968MEDIO 4.7The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-10555MEDIO 4.8The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-6499MEDIO 5.3The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.…
• CVE-2024-3026MEDIO 5.4The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users w…
• CVE-2023-7029MEDIO 5.4The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in al…