Log in Start free

paultgoodchild

Products

ProductCVEsExploitedLatest
Shield: Blocks Bots, Protects Users, and Prevents Security Breaches8–Feb 19, 2026
iControlWP1–Jan 30, 2025
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning1–Oct 31, 2026

Exploited and recent CVEs

  • CVE-2026-118057 High 7.2 Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log 0.2%
  • CVE-2026-0722 Medium 6.5 Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection 0.5%
  • CVE-2026-0561 Medium 6.1 Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter 0.7%
  • CVE-2025-14427 Medium 4.3 Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches <= 21.0.9 - Missing Authorization to Authenticated (Subscriber+) Email MFA Update 0.2%
  • CVE-2025-15370 Medium 4.3 Shield Security <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator 0.3%
  • CVE-2024-13742 Critical 9.8 iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection 0.9%
  • CVE-2024-4344 Medium 4.3 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery 0.2%
  • CVE-2023-6989 Critical 9.8 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion 56.6%
  • CVE-2023-0993 Medium 4.3 Shield Security <= 17.0.17 - Missing Authorization 0.5%
  • CVE-2023-0992 High 7.2 Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting 93.0%