PatchTheCVE: login configuratorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-34175: Unauthhttps://patchthecve.com/cve/CVE-2023-34175.htmlhttps://patchthecve.com/cve/CVE-2023-34175.htmlWed, 17 Jun 2026 06:03:03 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.CVE-2023-34369: Authhttps://patchthecve.com/cve/CVE-2023-34369.htmlhttps://patchthecve.com/cve/CVE-2023-34369.htmlWed, 17 Jun 2026 06:03:29 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.CVE-2023-1893: The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputtinghttps://patchthecve.com/cve/CVE-2023-1893.htmlhttps://patchthecve.com/cve/CVE-2023-1893.htmlWed, 17 Jun 2026 05:28:58 +0000MEDIUM 6.1: The Login Configurator WordPress plugin through 2.1 does not properly escape a URL parameter before outputting it to the page, leading to a reflected cross-site scripting vulnerability targeting site administrators.