Skip to content
OpenAdvisories

Vendor

GrandSlambert

5 known vulnerabilities.

Products

Login Configurator 2 Featured Page Widget 1 Better RSS Widget 1 Custom Page Extensions 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-23888

    WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through <= 0.6.

    GrandSlambert Custom Page Extensions
  • High 7.1
    CVE-2025-22569

    WordPress Featured Page Widget Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Featured Page Widget featured-page-widget allows Reflected XSS.This issue affects Featured Page Widget: from n/a through <= 2.2.

    GrandSlambert Featured Page Widget
  • High 7.1
    CVE-2023-34175

    WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

    GrandSlambert Login Configurator