Extension WordPress
Vulnérabilités Button Block – Design Stylish, Interactive, and Multi-Functional Buttons
Cette page rassemble les failles publiées pour Button Block – Design Stylish, Interactive, and Multi-Functional Buttons, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Button Block – Design Stylish, Interactive, and Multi-Functional Buttons
5 fiches
Button Block <= 1.2.0 – Cross-Site Request Forgery
The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on a…
*-1.2.0
1.2.1
30/07/2025
Button Block <= 1.1.5 – Missing Authorization
The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.1.5. This makes it…
*-1.1.5
1.1.6
13/01/2025
Button Block <= 1.1.9 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Button Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-1.1.9
1.2.0
07/01/2025
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 – Authenticated (Contributor+) Post Disclosure via Post Duplication
The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_block_duplicate_post' function. This makes it possible for authenticated attackers,…
*-1.1.5
1.1.6
18/12/2024
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 – Authenticated (Contributor+) Post Disclosure
The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.4 via the [btn_block] shortcode due to insufficient restrictions on which posts can…
*-1.1.4
1.1.5
20/11/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.