CVE-2021-24124: Terryl Wp Shieldon

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown could lead to privileged escalation.

Affected products

• Terryl Wp Shieldon: up to and including 1.6.3

Published 2021-03-18. Last modified 2026-06-17.