Shield Security (Getshieldsecurity) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 295 known versions, newest CVE from 2024-08-26. Vendor: Getshieldsecurity.

CVEs of Shield Security

• CVE-2024-7313 - CVSS 6.1 (medium), 2024-08-26: The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2023-6989 - CVSS 9.8 (critical), 2024-02-05: The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
• CVE-2024-22163 - CVSS 7.1 (high), 2024-01-31: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Shield Security – Smart Bot Blocking &…
• CVE-2023-0993 - CVSS 4.3 (medium), 2023-06-09: The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, and including,…
• CVE-2023-0992 - CVSS 7.2 (high), 2023-06-09: The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'User-Agent' header.…
• CVE-2022-0211 - CVSS 4.8 (medium), 2022-02-21: The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site…