Extension WordPress
Vulnérabilités Button Generator – Easily Create Custom Buttons with Icons and Analytics
Cette page rassemble les failles publiées pour Button Generator – Easily Create Custom Buttons with Icons and Analytics, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Button Generator – Easily Create Custom Buttons with Icons and Analytics
8 fiches
Button Generator – easily Button Builder <= 3.1.1 – Cross-Site Request Forgery
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.1. This is due to missing or incorrect nonce validation on a function. This makes it…
*-3.1.1
3.1.2
24/01/2025
Button Generator – easily Button Builder <= 2.3.9 – Cross-Site Request Forgery
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.9. This is due to missing or incorrect nonce validation on the button-generation function. This…
*-2.3.9
3.0
11/04/2024
Button Generator – easily Button Builder <= 2.3.8 – Missing Authorization
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function btg_count() function in versions up to, and including, 2.3.8. This makes it…
*-2.3.8
2.3.9
28/11/2023
Button Generator – easily Button Builder <= 2.3.8 – Cross-Site Request Forgery
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.8. This is due to missing nonce validation on the btg_count() function. This makes it possible…
*-2.3.8
2.3.9
28/11/2023
Button Generator – easily Button Builder <= 2.3.5 – Cross-Site Request Forgery in tools-data-base.php
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.5. This is due to missing or incorrect nonce validation in the tools-data-base.php file. This makes…
*-2.3.5
2.3.6
25/05/2023
Multiple Wow-Company Plugins (Various Versions) — Reflected Cross-Site Scripting via 'page' parameter
Several plugins by Wow-Company are vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…
*-2.3.4
2.3.5
22/05/2023
Button Generator – easily Button Builder <= 2.3.3 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Button Generator – easily Button Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.3.3
2.3.4
02/03/2023
Button Generator – easily Button Builder <= 2.3.2 – Cross-Site Request Forgery
The Button Generator WordPress plugin before 2.3.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.
*-2.3.2
2.3.3
05/12/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.