CVE-2025-15370 | Shield Security Plugin up to 21.0.9 on WordPress Google Authenticator MfaGoogleAuthToggle resource injection

January 15, 2026 Yanac

A vulnerability was found in Shield Security Plugin up to 21.0.9 on WordPress. It has been rated as problematic. The affected element is the function MfaGoogleAuthToggle of the component Google Authenticator. The manipulation leads to improper control of resource identifiers.

This vulnerability is traded as CVE-2025-15370. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More