CPE
The Shield Security - Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress contains a Stored Cross-Site Scripting vulnerability via the 'REQUEST_URI' parameter in versions up to and including 22.3.2.