Magic Buttons For Elementor
Monthly
Stored cross-site scripting in Magic Buttons for Elementor WordPress plugin versions ≤1.0 allows authenticated attackers with Contributor-level access to inject arbitrary scripts via the magic-button shortcode, executing in the browsers of any user viewing the affected page. No active exploitation or public exploit code is known, and EPSS probability is extremely low (0.03%).
Stored cross-site scripting vulnerability in the Magic Buttons for Elementor WordPress plugin allows authenticated attackers with contributor-level access to inject arbitrary web scripts via the magic-button shortcode. The flaw exists in all versions up to and including 1.0 due to insufficient input sanitization. No public exploit has been identified, and EPSS score is very low (0.03%), indicating minimal exploitation risk at this time.
Stored cross-site scripting in Magic Buttons for Elementor WordPress plugin versions ≤1.0 allows authenticated attackers with Contributor-level access to inject arbitrary scripts via the magic-button shortcode, executing in the browsers of any user viewing the affected page. No active exploitation or public exploit code is known, and EPSS probability is extremely low (0.03%).
Stored cross-site scripting vulnerability in the Magic Buttons for Elementor WordPress plugin allows authenticated attackers with contributor-level access to inject arbitrary web scripts via the magic-button shortcode. The flaw exists in all versions up to and including 1.0 due to insufficient input sanitization. No public exploit has been identified, and EPSS score is very low (0.03%), indicating minimal exploitation risk at this time.