GrandSlambert

Products

ProductCVEsExploitedLatest
Login Configurator2–Aug 30, 2023
Better RSS Widget1–Nov 22, 2023
Custom Page Extensions1–Jan 24, 2025
Featured Page Widget1–Jan 13, 2025

Exploited and recent CVEs

  • CVE-2025-23888 High 7.1 WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22569 High 7.1 WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-47813 Medium 6.5 WordPress Better RSS Widget Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-34175 High 7.1 WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-34369 Medium 5.9 WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%