Max Foundry
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Media Library Folders | 2 | – | Apr 10, 2024 |
| MaxButtons (WordPress plugin) | 1 | – | Aug 22, 2022 |
| MaxGalleria (WordPress plugin) | 1 | – | Mar 18, 2022 |
| Media Library Folders (WordPress plugin) | 1 | – | Nov 18, 2022 |
| WordPress Button Plugin MaxButtons | 1 | – | Jul 25, 2023 |
| WordPress Button Plugin MaxButtons (WordPress plugin) | 1 | – | Sep 23, 2022 |
Exploited and recent CVEs
- CVE-2024-31287 WordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability 0.7%
- CVE-2024-30486 WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability 0.6%
- CVE-2023-36503 WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-41634 WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%
- CVE-2022-38703 WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.5%
- CVE-2022-36346 WordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 0.4%
- CVE-2022-25603 WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability 0.6%