Button Plus for Elementor
Button Plus for Elementor has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Button Plus for Elementor has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by João Pedro Soares de Alcântara. Button Plus for Elementor is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-53746Elementor Button Plus <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Button Plus for Elementor
Author
FlickDevs
Additional Styles and Options for elementor button Widget. This plugin adds new elements/widgets to Elementor Page Builder. Demo Note: This plugin is an add-on of Elementor Page Builder(https://wordpress.org/plugins/elementor/) and will only work with Elementor Page Builder installed. Feel free to contact us if you find there are no elementor add-on/widget available that match your requirements. We are available to create it for you.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C