CVE-2021-24367: Wp Config File Editor Project Wp Config File Editor

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The WP Config File Editor WordPress plugin through 1.7.1 was affected by an Authenticated Stored Cross-Site Scripting (XSS) vulnerability.

Affected products

• Wp Config File Editor Project Wp Config File Editor: up to and including 1.7.1

Published 2021-06-21. Last modified 2026-06-17.