burgersoftware

Products

ProductCVEsExploitedLatest
Button1–Mar 29, 2024
SpaBiz1–Apr 15, 2025
StoreBiz1–Mar 27, 2025

Exploited and recent CVEs

  • CVE-2025-26740 Medium 6.5 WordPress SpaBiz plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26732 Medium 6.5 WordPress StoreBiz plugin <= 1.0.32 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-1872 High 8.8 Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode 0.9%