Shield: Blocks Bots, Protects Users, and Prevents Security Breaches

Vulnerabilities 11Slug wp-simple-firewallLatest version 21.2.6WordPress.org →

Minimum safe version

21.0.10

Update to 21.0.10 or later to address 11 fixable vulnerabilities

Latest available21.2.6 ✓

N/A

2026-02-18< 21.0.10

Shield Security <= 21.0.8 - Cross-Site Request Forgery to SQL Injection

Wordfence CVE

N/A

2026-02-18< 21.0.10

Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter

Wordfence CVE

Medium 4.3

2026-02-19< 21.0.10

CVE-2025-14427

CVE Wordfence

Medium 4.3

2026-01-16< 21.0.10

CVE-2025-15370

CVE Wordfence

Medium 6.1

2024-08-26< 20.0.6

CVE-2024-7313

CVE Patchstack Wordfence

Medium 4.3

2024-06-03< 19.1.11

WordPress Shield Security Plugin <= 19.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack CVE Wordfence

Critical 9.8

2024-02-05< 18.5.10

CVE-2023-6989

CVE Wordfence Patchstack WPScan

High 7.1

2024-01-31< 18.5.8

CVE-2024-22163

CVE Patchstack Wordfence WPScan

Medium 4.3

2023-06-09< 17.0.18

CVE-2023-0993

CVE Wordfence Patchstack WPScan

Medium 6.1

2023-06-09< 17.0.18

CVE-2023-0992

CVE Wordfence Patchstack WPScan

Medium 4.8

2022-02-21< 13.0.6

CVE-2022-0211

CVE Patchstack Wordfence WPScan