What’s Vulnerable › Products
paultgoodchild Shield: Blocks Bots, Protects Users, and Prevents Security Breaches vulnerabilities
11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest paultgoodchild Shield: Blocks Bots, Protects Users, and Prevents Security Breaches vulnerabilities
- CVE-2026-0722 — Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection (CVSS 6.5)
- CVE-2026-0561 — Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter (CVSS 6.1)
- CVE-2025-14427 — Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update (CVSS 4.3)
- CVE-2025-15370 — Shield Security <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator (CVSS 4.3)
- CVE-2024-7313 — Shield Security < 20.0.6 - Reflected XSS (CVSS 6.1)
- CVE-2024-4344 — Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2023-6989 — Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion (CVSS 9.8)
- CVE-2024-22163 — WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2023-0993 — Shield Security <= 17.0.17 - Missing Authorization (CVSS 4.3)
- CVE-2023-0992 — Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2022-0211 — Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)