Approved changes feed: RSS · Atom

cpe:2.3:a:maxfoundry:maxbuttons:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMaxfoundry (84ba7159-4d7a-5668-878f-dba94d27069d)
ProductMaxbuttons (b6763bd3-8c33-531c-8ff9-e541ba731994)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/maxbuttons purl2cpe 2026-06-01 10:14:07.527305
pkg:github/wpplugins/maxbuttons purl2cpe 2026-06-01 10:14:07.527309

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-39444 vulnerable 2026-06-08 07:23:06.569909 WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry MaxButtons maxbuttons allows Stored XSS.This issue affects MaxButtons: from n/a through <= 9.8.3.
Published: 2025-04-17T15:16:48.145Z
Updated: 2026-04-28T16:12:31.712Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.