Vulnerabilities

TI-2025-17655 CVE-2025-23888 · GHSA-m5hx-gg5v-rcw7

WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extens…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-24 No fix listed CWE-79

TI-2025-16455 CVE-2025-22569 · GHSA-cm3g-7qfv-7cxg

WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-13 No fix listed CWE-79

TI-2023-25921 CVE-2023-47813 · GHSA-rp9h-5652-qvmx

WordPress Better RSS Widget Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in grandslambert Better RSS Widget plugin <= 2.8.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00416 Published 2023-11-22 No fix listed CWE-79

TI-2023-17019 CVE-2023-34175 · GHSA-r98x-6qxq-33f4

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00374 Published 2023-08-30 No fix listed CWE-79

TI-2023-17200 CVE-2023-34369 · GHSA-g4g3-7r7c-g8wq

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-07-25 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Better RSS Widget Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)