PT-2023-16671 · WordPress · The Shield Security

Ram + 1 · Published 2023-06-09 · Updated 2023-06-15 · CVE-2023-0992

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Shield Security plugin for WordPress versions up to, and including, 17.0.17

Description The issue allows unauthenticated attackers to inject arbitrary web scripts in pages via the User-Agent header, which will execute whenever a user accesses an injected page. This is a stored Cross-Site Scripting issue.

Recommendations For versions up to, and including, 17.0.17, consider restricting access to the User-Agent header to minimize the risk of exploitation until a patch is available. As a temporary workaround, monitor user access logs closely for suspicious activity related to injected pages.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-0992

Affected Products

The Shield Security

References · 8

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2883864%40wp-simple-firewall%2Ftrunk&old=2883536%40wp-simple-firewall%2Ftrunk&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-0992 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0992 · Vendor Advisory
• https://t.me/cibsecurity/65089 · Telegram Post
• https://t.me/cvenotify/52347 · Telegram Post
• https://wordfence.com/blog/2023/04/multiple-vulnerabilities-patched-in-shield-security · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/162dff28-94ea-4a47-a6cb-a13317cf1a04?source=cve · Note
• https://wordpress.org/plugins/wp-simple-firewall/#developers · Note