Forget About Shortcode Buttons
Forget About Shortcode Buttons has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10.
The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
3 independent researchers contributed these findings, one record each. Forget About Shortcode Buttons is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-63041Forget About Shortcode Buttons <= 2.1.3 - Missing Authorization
Read the full analysisVulnerability Records

Forget About Shortcode Buttons
Author
Code Amp
Forget About Shortcode (FASC) Buttons are a visual way to add CSS buttons in the rich text editor and to your themes. Instead of adding shortcodes in the post editor, you insert real, styled buttons – making the process of adding buttons to your posts and pages much more natural whilst improving the appearance and usability of the post editor. FASC Buttons tries to be as clean as possible with the html, only using data attributes for necessary features – the buttons you use in the post editor use the exact same classes as on the front end of your site with no extra or hidden markup to make them behave this way. New – add FASC buttons to widgets in WP 4.8 🙂 Editing a button couldn’t be easier – just double click a button and an options panel appears allowing you to completely reconfigure the current button – beats tedious shortcodes and using precise syntax! Utilises the latest CSS properties for styling Includes Dashicons & Font Awesome Icons to add to your buttons and use in your themes. Your ratings mean a lot – if you like the plugin please consider leaving a review. This plugin is only compatible with WordPress 4.2 and upwards (download version 1.x for compatibility with WP 3.9 – 4.1) Links FASC Buttons Discussion FASC Buttons Video Demo
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C