Skip to content
Paultgoodchild vulnerabilities
Newest
-
paultgoodchild shield security – smart bot blocking, brute-force login protection & file scanning
Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log
CVE-2026-118057
7.2 High
-
paul icontrolwp
WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability
CVE-2026-34901
9.8 Critical
-
paultgoodchild shield: blocks bots, protects users, and prevents security breaches
Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection
CVE-2026-0722
6.5 Medium
-
paultgoodchild shield: blocks bots, protects users, and prevents security breaches
Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter
CVE-2026-0561
6.1 Medium
-
paultgoodchild shield: blocks bots, protects users, and prevents security breaches
Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update
CVE-2025-14427
4.3 Medium
-
paultgoodchild shield: blocks bots, protects users, and prevents security breaches
Shield Security <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator
CVE-2025-15370
4.3 Medium
-
icontrolwp
iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection
CVE-2024-13742
9.8 Critical
-
paultgoodchild shield: blocks bots, protects users, and prevents security breaches
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery
CVE-2024-4344
4.3 Medium
-
getshieldsecurity shield security, paultgoodchild shield: blocks bots, protects users, and prevents security breaches +1 more
Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
CVE-2023-6989
EPSS 56.6%
9.8 Critical
-
getshieldsecurity shield security, paultgoodchild shield security – smart bot blocking & intrusion prevention security, shield security – smart bot blocking & intrusion prevention security +2 more
WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-22163
7.1 High
-
getshieldsecurity shield security, paultgoodchild shield: blocks bots, protects users, and prevents security breaches +1 more
Shield Security <= 17.0.17 - Missing Authorization
CVE-2023-0993
4.3 Medium
-
getshieldsecurity shield security, paultgoodchild shield: blocks bots, protects users, and prevents security breaches +1 more
Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting
CVE-2023-0992
EPSS 93.0%
7.2 High