Vulnerabilities protected by our LFI: Local File Inclusion firewall rule

566,387
Attacks Blocked in Past 24 Hours

Showing 1-20 of 254 Vulnerabilities

Title CVE ID CVSS Vector Date
Event Manager for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Local File Inclusion CVE-2024-43138 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H August 7, 2024
PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode CVE-2023-5199 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H October 29, 2023
WordPress Ad Widget <= 2.11.0 - Local File Inclusion 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H January 1, 2017
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion CVE-2024-12209 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 7, 2024
Ads Booster by Ads Pro <= 1.12 - Unauthenticated Local File Inclusion CVE-2024-52428 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 15, 2024
ZIJ KART <= 1.1 - Unauthenticated Local File Inclusion CVE-2024-52381 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 11, 2024
Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion CVE-2024-10871 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 8, 2024
Advanced Online Ordering and Delivery Platform <= 2.0.0 - Unauthenticated Local File Inclusion CVE-2024-50497 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 25, 2024
Meta News <= 1.1.7 - Unauthenticated Local File Inclusion CVE-2024-50435 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2024
Clean Retina <= 3.0.6 - Unauthenticated Local File Inclusion CVE-2024-50436 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2024
NewsCard <= 1.3 - Unauthenticated Local File Inclusion CVE-2024-50434 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2024
Mags <= 1.1.6 - Unauthenticated Local File Inclusion CVE-2024-49701 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 21, 2024
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Unauthenticated Local File Inclusion CVE-2024-47323 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 25, 2024
Users Control <= 1.0.16 - Unauthenticated Local File Inclusion CVE-2024-44015 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
WPSPX <= 1.0.2 - Unauthenticated Local File Inclusion CVE-2024-44034 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
Podiant <= 1.1 - Unauthenticated Local File Inclusion CVE-2024-44016 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
MH Board <= 1.3.2.1 - Unauthenticated Local File Inclusion CVE-2024-44017 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
VR Calendar <= 2.4.4 - Unauthenticated Local File Inclusion CVE-2024-44013 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
ABCApp Creator <= 1.1.2 - Unauthenticated Local File Inclusion CVE-2024-44023 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024
WP Newsletter Subscription <= 1.1 - Unauthenticated Local File Inclusion CVE-2024-44012 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 24, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation