CVE-2026-0722: Improper Neutralization of Special Elements used in an SQL Command

The Shield Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 21.0.8. This is due to the plugin allowing nonce verification to be bypassed via user-supplied parameter in the 'isNonceVerifyRequired' function. This makes it possible for...

PT-2023-16672

Name of the Vulnerable Software and Affected Versions Shield Security plugin for WordPress versions up to, and including, 17.0.17 Description The issue concerns missing authorization on the 'theme-plugin-file' AJAX action. This allows authenticated attackers to add arbitrary audit log entries,...