Getshieldsecurity Shield Security — known CVE vulnerabilities

Every CVE whose affected-product data names Getshieldsecurity Shield Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-6989 — CVSS 9.8 (critical): The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in…
• CVE-2023-0992 — CVSS 7.2 (high): The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the…
• CVE-2024-22163 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Shield Security –…
• CVE-2024-7313 — CVSS 6.1 (medium): The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading…
• CVE-2022-0211 — CVSS 4.8 (medium): The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to…
• CVE-2023-0993 — CVSS 4.3 (medium): The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to…