CVE-2026-118057

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...

CVE-2026-118057 Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...

EUVD-2026-114648

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...

CVE-2026-118057

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 22.3.2 . The root cause is insufficient input sanitization and output escaping of the 'REQUEST_URI' parame...

CVE-2026-118057: paultgoodchild: The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is…

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...