CVE-2023-0993

概要

参考情報

• plugins.trac.wordpress.org/changeset · Patch
• wordpress.org/plugins/wp-simple-firewall · Product
• wordfence.com/blog/2023/04/multiple-vulnerabilities-patched-in-shield-security
• wordfence.com/threat-intel/vulnerabilities/id/674461ad-9b61-48c4-af2a-5dfcaeb38215 · Third Party Advisory

shield security のその他の脆弱性

• CVE-2024-7313中 6.1The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading …
• CVE-2023-6989緊急 9.8The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all v…
• CVE-2024-22163中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Shield Security – Smar…
• CVE-2023-0992中 6.1The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'Use…
• CVE-2022-0211中 4.8The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perfo…