maxfoundry vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20253
3. 20266

Newest CVEs

• CVE-2026-100108

  Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting

  maxfoundry · Social Share Buttons

  Medium6.4
• CVE-2026-109702

  WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability

  maxfoundry · Social Share Buttons

  High7.1
• CVE-2026-97260

  WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

  maxfoundry · MaxGalleria

  High7.1
• CVE-2026-13245

  MaxButtons <= 9.8.5 - Reflected Cross-Site Scripting via 'view' Parameter

  maxfoundry · MaxButtons – Create buttons

  Medium6.1
• CVE-2021-47982

  WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset

  maxfoundry · WP-Paginate

  Medium5.1
• CVE-2026-2312

  Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename

  maxfoundry · Media Library Folders

  Medium4.3
• CVE-2025-39444

  WordPress MaxButtons plugin <= 9.8.3 - Cross Site Scripting (XSS) vulnerability

  maxfoundry · MaxButtons

  Medium5.9
• CVE-2025-28933

  WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerability

  maxfoundry · MaxA/B

  High7.1
• CVE-2025-0935

  Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change

  maxfoundry · Media Library Folders

  Medium4.3
• CVE-2024-9219

  WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting

  maxfoundry · Social Share Buttons

  Medium6.1