CVE-2024-7313

The Shield Security WordPress plugin (versions prior to 20.0.6 ) is vulnerable to Reflected Cross-Site Scripting (XSS) because it fails to properly sanitize and escape the nav_sub parameter in the admin dashboard. This flaw allows authenticated users to execute arbitrary JavaScript in the session...

CVE-2022-0211

The CVE-2022-0211 entry concerns the WordPress Shield Security plugin (before 13.0.6). The vulnerability is a stored XSS caused by the plugin not sanitising/escaping admin notes, which could let high-privilege users execute JavaScript even when unfiltered_html is disallowed. Public references in ...

CVE-2023-6989

CVE-2023-6989 affects the Shield Security – Smart Bot Blocking & Intrusion Prevention Security WordPress plugin (wp-simple-firewall). All versions up to and including 18.5.9 are vulnerable to Local File Inclusion via render_action_template, enabling an unauthenticated attacker to include and exec...