PT-2023-16672

Name of the Vulnerable Software and Affected Versions Shield Security plugin for WordPress versions up to, and including, 17.0.17 Description The issue concerns missing authorization on the 'theme-plugin-file' AJAX action. This allows authenticated attackers to add arbitrary audit log entries,...