CVE-2021-25058: The Buffer Button Project The Buffer Button

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field.

Affected products

• The Buffer Button Project The Buffer Button: up to and including 1.0

Published 2022-02-21. Last modified 2026-06-17.