CVE-2026-118057

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...