Forget About Shortcode Buttons

Forget About Shortcode Buttons has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each. Forget About Shortcode Buttons is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
4.9/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Forget About Shortcode Buttons vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-63041

Forget About Shortcode Buttons <= 2.1.3 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records
Forget About Shortcode Buttons banner
Latestv2.1.3

Forget About Shortcode Buttons

Code Amp

Author

Code Amp

4.7(69)
94/100
Last Updated
2024-11-04 (2y ago)
Active Installs
20,000+
Downloads
401,501
Requires WP
4.2+
Requires PHP
0+
Tested up to
WP 6.7.7
Created
2014-04-04 (13y ago)

Forget About Shortcode (FASC) Buttons are a visual way to add CSS buttons in the rich text editor and to your themes. Instead of adding shortcodes in the post editor, you insert real, styled buttons – making the process of adding buttons to your posts and pages much more natural whilst improving the appearance and usability of the post editor. FASC Buttons tries to be as clean as possible with the html, only using data attributes for necessary features – the buttons you use in the post editor use the exact same classes as on the front end of your site with no extra or hidden markup to make them behave this way. New – add FASC buttons to widgets in WP 4.8 🙂 Editing a button couldn’t be easier – just double click a button and an options panel appears allowing you to completely reconfigure the current button – beats tedious shortcodes and using precise syntax! Utilises the latest CSS properties for styling Includes Dashicons & Font Awesome Icons to add to your buttons and use in your themes. Your ratings mean a lot – if you like the plugin please consider leaving a review. This plugin is only compatible with WordPress 4.2 and upwards (download version 1.x for compatibility with WP 3.9 – 4.1) Links FASC Buttons Discussion FASC Buttons Video Demo

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C