Vendor
Paultgoodchild
10 known vulnerabilities in products by Paultgoodchild, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-6989 | Getshieldsecurity Shield Security: PHP Remote File Inclusion | 9.8 | |
| High | CVE-2023-0992 | Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting | 7.2 | |
| Critical | CVE-2024-13742 | iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection | 9.8 | |
| High | CVE-2026-118057 | Cross-site Scripting (CVE-2026-118057) | 7.2 | |
| Medium | CVE-2026-0561 | Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter | 6.1 | |
| Medium | CVE-2026-0722 | Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection | 6.5 | |
| Medium | CVE-2023-0993 | Shield Security <= 17.0.17 - Missing Authorization | 4.3 | |
| Medium | CVE-2025-15370 | Authorization Bypass Through User-Controlled Key (CVE-2025-15370) | 4.3 | |
| Medium | CVE-2025-14427 | Missing Authorization (CVE-2025-14427) | 4.3 | |
| Medium | CVE-2024-4344 | Cross-Site Request Forgery (CSRF) (CVE-2024-4344) | 4.3 |
Products
| Shield: Blocks Bots, Protects Users, And Prevents Security Breaches | 8 | 0 |