788 matches found
CVE-2025-15370
CVE-2025-15370 affects Shield: Blocks Bots, Protects Users, and Prevents Security Breaches (WordPress Shield Security plugin) up to version 21.0.9. The issue is an Insecure Direct Object Reference via MfaGoogleAuthToggle that allows authenticated attackers with Subscriber-level access and above t...
WordPress Plugin Shield: Blocks Bots, Protects Users, and Prevents Security Breaches
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-3215
The Shield: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 21.0.9 via the MfaGoogleAuthToggle class due to missing validation on a user controlled key. This makes it possible...
WordPress Shield Security plugin <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator vulnerability
Authenticated Subscriber+ Insecure Direct Object Reference to Disable Google Authenticator vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Shield Security versions = 21.0.9...
CVE-2022-0211
The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
EUVD-2025-200256
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...
CVE-2025-59705
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01...
VulnCheck KEV: CVE-2024-53375
An Authenticated Remote Code Execution RCE vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmpgetsites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionali...
Malicious code in ai-crowl-shield (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549c731c3344684a7d963ff1c6a038b7eff1d29bfe6e235c520bc4be03fb905b The package ai-crowl-shield was found to contain malicious code. Source: ghsa-malware b7b9897c30c2e8638c5e762b4e62bca4a8bb7c3afd0e2e6bece241bb534dd7c...
EUVD-2025-199193
Malicious code in ai-crowl-shield npm...
MAL-2025-191063 Malicious code in ai-crowl-shield (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549c731c3344684a7d963ff1c6a038b7eff1d29bfe6e235c520bc4be03fb905b The package ai-crowl-shield was found to contain malicious code. Source: ghsa-malware b7b9897c30c2e8638c5e762b4e62bca4a8bb7c3afd0e2e6bece241bb534dd7c...
EUVD-2025-198771
Malicious code in iron-shield-miniapp npm...
Malicious code in iron-shield-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190773 Malicious code in iron-shield-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...
EUVD-2006-6942
Malware in sbrugna...
EUVD-2020-9319
Malware in sbrugna...
EUVD-2019-15257
Malware in sbrugna...
EUVD-2016-7800
Malware in sbrugna...