VULNERABILITY INTELLIGENCE

CVE-2026-118057

CVSS score7.2 HIGH

CISA KEVNot currently listed

Published2026-10-31

Last modified2026-11-01

Description

The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This makes…