Vulnerabilities protected by our Directory Traversal firewall rule

1,797,650
Attacks Blocked in Past 24 Hours

Showing 301-315 of 315 Vulnerabilities

Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
4.3
CVE ID Unknown
Dec 31, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
4.1
CVE-2023-6120
Dec 8, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
4.1
CVE ID Unknown
Jun 16, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
4.1
CVE ID Unknown
Jul 2, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
3.8
CVE-2022-4031
Nov 29, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
WOLF <= 1.0.8.3 - Authenticated (Editor+) CSV Path Traversal
2.7
CVE-2024-52396
Nov 11, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Tutor LMS <= 2.7.1 - Authenticated (Admin+) Path Traversal
2.7
CVE-2024-37266
Jun 27, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2024-3034
Apr 26, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
2.7
CVE-2024-31342
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal
2.7
CVE-2024-30492
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2023-52144
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
2.7
CVE-2023-4216
Aug 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal
2.7
CVE-2023-2117
May 2, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2022-45833
Nov 30, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
2.2
CVE-2023-5907
Nov 20, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N December 31, 2016
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal CVE-2023-6120 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N December 8, 2023
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N June 16, 2017
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N July 2, 2016
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification CVE-2022-4031 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L November 29, 2022
WOLF <= 1.0.8.3 - Authenticated (Editor+) CSV Path Traversal CVE-2024-52396 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N November 11, 2024
Tutor LMS <= 2.7.1 - Authenticated (Admin+) Path Traversal CVE-2024-37266 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N June 27, 2024
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal CVE-2024-3034 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N April 26, 2024
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download CVE-2024-31342 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N April 5, 2024
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal CVE-2024-30492 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N March 28, 2024
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal CVE-2023-52144 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N December 28, 2023
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url' CVE-2023-4216 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N August 14, 2023
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal CVE-2023-2117 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N May 2, 2023
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal CVE-2022-45833 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N November 30, 2022
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal CVE-2023-5907 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N November 20, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation