Vulnerabilities protected by our Malicious File Upload (PHP) firewall rule

405,374
Attacks Blocked in Past 24 Hours

Showing 401-420 of 458 Vulnerabilities

Title CVE ID CVSS Vector Date
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-53811 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 2, 2024
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload CVE-2024-49331 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 17, 2024
AdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload CVE-2022-1206 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 19, 2024
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload CVE-2024-30231 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 26, 2024
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6826 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 13, 2023
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6558 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6636 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-49814 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6090 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6219 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload CVE-2023-47842 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 20, 2023
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload CVE-2023-47784 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 14, 2023
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-4861 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 19, 2023
Import XML and RSS Feeds <= 2.1.3 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-4300 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 28, 2023
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-25444 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 17, 2023
Slider Revolution <= 6.6.12 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-2359 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 22, 2023
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-0924 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 4, 2023
PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-1540 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 11, 2022
Theme Demo Import <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-1538 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 8, 2022
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-3076 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 5, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation