Johto Robbie

Name of the Vulnerable Software and Affected Versions: WP Shieldon WordPress plugin versions 1.6.3 and below Description: The issue is caused by unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, which leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown. This could potentially lead to privileged escalation. Recommendations: For WP Shieldon WordPress plugin versions 1.6.3 and below, update to a version above 1.6.3 to resolve the issue. As a temporary workaround, consider restricting access to the CAPTCHA page until a patch is available.