← Back

Pootle Button

pootle_button

Vendor: Pootlepress • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-15811
1Pootlepress
1Pootle Button
May 13, 2026
Oct 23, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in assets/dialog.php, exploitable via wp-admin/admin-ajax.php.