PLUGIN SECURITY

Is Forget About Shortcode Buttons safe?

A visual way to add CSS buttons in the rich text editor and to your themes.

What this plugin does

  • Slug: forget-about-shortcode-buttons
  • Author: Code Amp
  • 20000+ active installs
  • 94/100 rating (69 reviews on wordpress.org)
  • 401176 all-time downloads
  • On WordPress.org since 2014-04-04

buttoncsseditshortcodevisual editor

Maintenance status

  • Latest known version: 2.1.3
  • Last updated: 2024-11-04 8:18pm GMT
  • Tested up to WordPress: 6.7.7
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Forget About Shortcode Buttons. Reported between 2016 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-63041 Forget About Shortcode Buttons [forget-about-shortcode-buttons] <= 2.1.3 (unfixed) Missing Authorization Medium 5.4 < 2.1.3 2.1.3 2026-06-26 ✓ fixed in latest
CVE-2023-32579 Forget About Shortcode Buttons [forget-about-shortcode-buttons] < 2.1.3 Cross-Site Request Forgery (CSRF) Medium 5.3 < 2.1.3 2.1.3 2023-05-11 ✓ fixed in latest
CVE-2016-1000133 Forget About Shortcode Buttons [forget-about-shortcode-buttons] < 1.1.2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.1.2 1.1.2 2016-02-29 ✓ fixed in latest

How to fix it

Keep Forget About Shortcode Buttons updated — 2.1.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.