PLUGIN SECURITY
Is Buttonizer - Smart Floating Action Button safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Buttonizer - Smart Floating Action Button WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
buttonizer-multifunctional-button - Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder [buttonizer-multifunctional-button] < 2.6.3 [CVE-2021-24992, WordPress Buttonizer plugin <= 2.5.4 - Stored Cross-Site Scripting (XSS) vulnerability, Buttonizer - Smart Floating Action Button < 2.5.5 - Admin+ Stored Cross-Site Scripting, Buttonizer - Smart Floating Action Button <= 2.5.4 - Admin+ Stored Cross-Site Scripting]
- Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder [buttonizer-multifunctional-button] < 2.6.3 [WordPress Buttonizer plugin < 2.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability]
- Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder [buttonizer-multifunctional-button] < 2.6.3 [WordPress Buttonizer plugin < 2.6.3 - Sensitive Information Disclosure vulnerability]
- Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder [buttonizer-multifunctional-button] < 2.6.3 [Freemius SDK <= 2.4.2 - Missing Authorization Checks]
- Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder [buttonizer-multifunctional-button] < 3.3.10 [CVE-2023-33999, WordPress Buttonizer Plugin < 3.3.10 is vulnerable to Cross Site Scripting (XSS), Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- WP Call Button – Easy Click to Call Button for WordPress — 40000+ active installs — max PHP 8.4
- Sticky Buttons – Floating Buttons Builder — 10000+ active installs — max PHP 8.4
- Lead Call Buttons — 5000+ active installs
- chat-me-now — 4000+ active installs
- Call To Action Customizable Block — 1000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.