Approved changes feed: RSS · Atom

cpe:2.3:a:paultgoodchild:shield_security_–_smart_bot_blocking_&_intrusion_prevention_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPaultgoodchild (f08f12a5-ad36-5efd-8f54-f57de3ac78cf)
ProductShield Security – Smart Bot Blocking & Intrusion Prevention Security (8ea6f0b3-6156-5f4f-b131-61f7cf7aa8be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6989 vulnerable 2026-06-08 06:21:56.555578 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
CRITICAL (9.8)
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
Published: 2024-02-05T21:21:31.299Z
Updated: 2026-04-08T16:33:39.945Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.