CVE Database /
CVE-2024-7313
CVE · Medium
CVE-2024-7313 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 20.0.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-7313
|
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 20.0.6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 20.0.6
|
20.0.6 |
2024-08-05 |
—
|
CVE-2024-7313
The Shield Security plugin for WordPress has a security flaw affecting all versions up to 20.0.5, which allows malicious code injection through the 'nav_sub' parameter due to inadequate input validation and output protection. This vulnerability can be exploited by attackers who trick users into performing certain actions, enabling them to execute arbitrary web scripts on affected pages. As a result, sensitive user data may become compromised.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings