Login Configurator Project Login Configurator — known CVE vulnerabilities

Every CVE whose affected-product data names Login Configurator Project Login Configurator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-34175 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.
• CVE-2023-1893 — CVSS 6.1 (medium): The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a…
• CVE-2023-34369 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.