CVE-2022-36346 - WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

HIGH

WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Published Aug 22, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.40%

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin <= 9.2 at WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
<= 9.2	affected	<=9.2

Vendor solution

Update to 9.3 or higher version.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://patchstack.com/database/vulnerability/maxbuttons/wordpress-maxbuttons-plugins-9-2-multiple-cross-site-request-forgery-csrf-vulnerabilities		x_refsource_CONFIRMPatchThird Party Advisory
https://wordpress.org/plugins/maxbuttons/#developers		x_refsource_CONFIRMRelease NotesThird Party Advisory