Paul vulnerabilities

Products

• Custom Content by Country (by Shield Security) 1
• iControlWP 1

Latest Paul CVEs

Newest publication first

1. CVE-2026-34901 WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability

   Published 2026-06-15

   Critical·CVSS 9.8 EPSS 0.32%

   Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.

2. CVE-2022-41650 WordPress Custom Content by Country plugin <= 3.1.2 - Broken Access Control vulnerability

   Published 2026-02-17

   Medium·CVSS 6.5 EPSS 0.31%

   Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield Security): from n/a through 3.1.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.