burgersoftware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

burgersoftware records in CISA KEV

No burgersoftware vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-01741 CVE-2024-1872 · GHSA-cjw7-2fr6-92q8

Button <= 1.1.27 - Authenticated (Contributor+) PHP Object Injection in button_shortcode

MEDIUM 42

The Button plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.27 via deserialization of untrusted input in the button_shortcode function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00893 Published 2024-03-29 No fix listed CWE-502

TI-2025-19656 CVE-2025-26740 · GHSA-rw2h-rfm9-p3m9

WordPress SpaBiz plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in burgersoftware SpaBiz spabiz allows DOM-Based XSS.This issue affects SpaBiz: from n/a through <= 1.0.18.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-04-15 No fix listed CWE-79

TI-2025-19648 CVE-2025-26732 · GHSA-3v3f-r75q-x3fq

WordPress StoreBiz plugin <= 1.0.32 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in burgersoftware StoreBiz storebiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through <= 1.0.32.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-03-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0