Paultgoodchild vulnerabilities
We track 3 vulnerabilities in Paultgoodchild products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
Latest Paultgoodchild vulnerabilities
- 7.2 High severity
Shield Security – Smart Bot Blocking…: Improper Neutralization of Input During Web Page Generation
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sani
- 9.8 Critical severity
iControlWP: Deserialization of Untrusted Data
The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter. This makes it possible for unauthenticate
- 9.8 Critical severity
Shield: Blocks Bots, Protects Users, and…: Improper Limitation of a Pathname to a Restricted Directory
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticate