PLUGIN SECURITY
Is Wp Simple Firewall safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Wp Simple Firewall WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
wp-simple-firewall
Known vulnerabilities
- CVE-2022-0211 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 13.0.6 (XSS) · Medium
- CVE-2023-0992 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 17.0.18 (XSS) · Medium
- CVE-2023-0993 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 17.0.18 (Missing Authorization) · Medium
- CVE-2024-22163 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 18.5.8 (XSS) · High
- CVE-2023-6989 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 18.5.10 (Path Traversal) · Critical
+ 6 more known vulnerabilities
- CVE-2024-4344 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 19.1.11 (CSRF) · Medium
- CVE-2024-7313 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 20.0.6 (XSS) · Medium
- CVE-2025-15370 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 21.0.10 (CWE-639) · Medium
- CVE-2025-14427 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 21.0.10 (Missing Authorization) · Medium
- CVE-2026-0561 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 21.0.10
- CVE-2026-0722 — Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning [wp-simple-firewall] < 21.0.10
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.