CVE Database /
CVE-2024-22163
CVE · High
CVE-2024-22163 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 18.5.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-22163
|
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 18.5.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 18.5.8
|
18.5.8 |
2024-01-16 |
—
|
CVE-2024-22163
A cross-site scripting vulnerability in Shield Security plugin versions below 18.5.8 could permit attackers to inject malicious scripts that execute on the website when visitors access it, potentially delivering redirects, advertisements, or arbitrary HTML content. The flaw was discovered by Yudistira Arya and has been resolved in version 18.5.8 and later. Users should upgrade the wp-simple-firewall plugin to at least version 18.5.8 to eliminate this risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings