CVE Database /
CVE-2021-25052
CVE · High
CVE-2021-25052 — Button Generator – Easily Create Custom Buttons with Icons and Analytics [button-generation] < 2.3.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-25052
|
Button Generator – Easily Create Custom Buttons with Icons and Analytics [button-generation] < 2.3.3 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 2.3.3
|
2.3.3 |
2021-12-05 |
—
|
CVE-2021-25052
The Button Generator plugin for WordPress prior to version 2.3.3 contains a file inclusion vulnerability in its admin interface that permits attackers to load arbitrary PHP files through CSRF attacks, potentially enabling remote code execution via data:// or http:// protocol wrappers.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings