Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Custom Content by Country (by Shield Security) lets unauthorized users edit settings

CVE-2022-41650
Summary

The Custom Content by Country plugin by Shield Security does not properly check user permissions, allowing unauthorized users to access and edit sensitive settings. This means that users who shouldn't have access to certain settings can still make changes, which can affect the plugin's functionality and compromise website security. To fix this issue, update the plugin to the latest version, 3.1.2 or later, as soon as possible.

Original title
Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield Security): from n/a thro...
Original description
Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.This issue affects Custom Content by Country (by Shield Security): from n/a through 3.1.2.
nvd CVSS3.1 6.5
Vulnerability type
CWE-862 Missing Authorization
Published: 17 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026