CVE-2023-6989

CRITICAL NUCLEI

Shield Security < 18.5.10 - Unauthenticated Local File Inclusion via render_action_template Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-6989. PoCs published by halilkirazkaya. A Nuclei detection template is also available.

AI-analyzed exploit summary The repository contains functional exploit code for multiple CVEs, including CVE-2023-6989, demonstrating vulnerabilities such as remote file inclusion, path traversal, and unauthorized metadata updates. Each PoC includes specific HTTP requests or commands to exploit the vulnerabilities.

Description

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the render_action_template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.

Exploits (1)

github WORKING POC 4 stars
by halilkirazkaya · poc
https://github.com/halilkirazkaya/cve-poc-garage/tree/main/2023/CVE-2023-6989.md

The repository contains functional exploit code for multiple CVEs, including CVE-2023-6989, demonstrating vulnerabilities such as remote file inclusion, path traversal, and unauthorized metadata updates. Each PoC includes specific HTTP requests or commands to exploit the vulnerabilities.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Various (WordPress plugins, QNAP Photo Station, IBM Data Risk Manager, etc.)
No auth needed
Prerequisites: Network access to the target system · Specific software versions as listed in the PoCs
devstral-2 · analyzed Feb 27, 2026 Full analysis →

Nuclei Templates (1)

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion
CRITICALVERIFIEDby s4e-io
Shodan: http.html:/wp-content/plugins/wp-simple-firewall
FOFA: body=/wp-content/plugins/wp-simple-firewall

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.5657
EPSS Percentile 98.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-22 CWE-98
Status published
Products (2)
getshieldsecurity/shield_security < 18.5.10
paultgoodchild/Shield: Blocks Bots, Protects Users, and Prevents Security Breaches < 18.5.9
Published Feb 05, 2024
Tracked Since Feb 18, 2026