Vulnerabilities protected by our LFI: Local File Inclusion firewall rule

566,387
Attacks Blocked in Past 24 Hours

Showing 121-140 of 254 Vulnerabilities

Title CVE ID CVSS Vector Date
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-11429 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 4, 2024
Lenxel Core <= 1.1 - Authenticated (Contributor+) Local File Inclusion CVE-2024-53790 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 29, 2024
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-10873 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 22, 2024
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion CVE-2024-10898 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 20, 2024
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion CVE-2024-52386 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 11, 2024
WP Hotel Booking <= 2.1.4 - Authenticated (Contributor+) Local File Inclusion CVE-2024-51582 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 31, 2024
WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion CVE-2024-10436 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 28, 2024
The Pack Elementor addons <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion CVE-2024-50453 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 24, 2024
Qode Essential Addons <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-50457 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 24, 2024
Qi Blocks <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-49690 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 21, 2024
Point Maker <= 0.1.4 - Authenticated (Contributor+) Local File Inclusion CVE-2024-49317 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 15, 2024
Dynamic Elementor Addons <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion CVE-2024-49243 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 14, 2024
Maan Addons For Elementor <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion CVE-2024-49251 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 14, 2024
pretix widget <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion CVE-2024-9575 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 9, 2024
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Authenticated (Contributor+) Local File Inclusion CVE-2024-47324 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H September 25, 2024
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion CVE-2024-44048 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H September 16, 2024
Animated Number Counters <= 1.9 - Authenticated (Editor+) Local File Inclusion CVE-2024-43957 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 26, 2024
Void Elementor Post Grid Addon for Elementor Page builder <= 2.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-43281 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 16, 2024
Woo Products Widgets For Elementor <= 2.0.4 - Authenticated (Contributor+) Local File Inclusion CVE-2024-43271 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 12, 2024
JetGridBuilder <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-43221 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 9, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation