Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning

Уязвимости

• CVE-2023-6989без авторизации≤ 18.5.9

  Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion

  Критич. 9.8

• CVE-2026-0722без авторизации · нужен клик≤ 21.0.8

  Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection

  Средний 6.5

• CVE-2026-0561без авторизации · нужен клик≤ 21.0.8

  Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter

  Средний 6.1

• CVE-2024-22163без авторизации · нужен клик≤ 18.5.7

  WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2023-0992без авторизации→ 17.0.18

  Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2024-4344без авторизации · нужен клик≤ 19.1.10

  Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery

  Средний 4.3

• CVE-2025-14427подписчик+≤ 21.0.9

  Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update

  Средний 4.3

• CVE-2025-15370подписчик+≤ 21.0.9

  Shield Security <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator

  Средний 4.3

• CVE-2023-0993нужен вход→ 17.0.18

  Shield Security <= 17.0.17 - Missing Authorization

  Средний 4.3