Mww Disclaimer Buttons Vulnerabilities

The MWW Disclaimer Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.41 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts i...

CVSS:

4.4

Affected:

3.41 – 3.41

Fixed in:

3.5

Disclosed:

Sep 26, 2025

CVE-2025-60154 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jennifer Moss MWW Disclaimer Buttons allows Stored XSS. This issue affects MWW Disclaimer Buttons: from n/a through 3.41.

Affected:

up to 3.41

Fix:

No patched version reported

Disclosed:

Sep 26, 2025

CVE-2025-60154 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2.

Affected:

up to 3.2

Fixed in:

3.2

Disclosed:

Apr 15, 2024

CVE-2024-32428 on NVD →

The MWW Disclaimer Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to i...

CVSS:

4.4

Affected:

up to 3.0.2

Fixed in:

3.2

Disclosed:

Apr 12, 2024

CVE-2024-32428 on NVD →