Vulnerabilities protected by our Malicious File Upload (PHP) firewall rule

407,039
Attacks Blocked in Past 24 Hours

Showing 121-140 of 458 Vulnerabilities

Title CVE ID CVSS Vector Date
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC <= 1.1.15 - Arbitrary File Upload CVE-2022-1952 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 13, 2022
HTML2WP <= 1.0.0 - Arbitrary File Upload CVE-2022-1574 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 2, 2022
WP SVG Icons <= 3.2.3 - Authenticated (Admin+) Arbitrary File Upload CVE-2022-0863 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 18, 2022
VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload CVE-2022-1409 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 21, 2022
Advanced uploader <= 4.2 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2022-1103 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N April 19, 2022
AGIL(Automatic Grid Image Listing) <= 1.0 - Arbitrary File Upload CVE-2021-25119 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 19, 2022
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload CVE-2022-27862 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 18, 2022
Import WP – Import and Export WordPress data to XML or CSV files <= 2.4.5 - Authenticated Arbitrary File Upload CVE-2022-1273 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 11, 2022
Catch Themes Demo Import <= 3.0.2 - Authenticated (Admin+) Arbitrary File Upload CVE-2022-1008 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 11, 2022
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution CVE-2021-25094 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N March 28, 2022
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion CVE-2022-0403 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 14, 2022
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution CVE-2022-0537 6.0 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L March 14, 2022
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload CVE-2022-0687 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 23, 2022
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload CVE-2022-0440 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 7, 2022
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload CVE-2021-24216 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 7, 2022
AdSanity < 1.8.2 - Authenticated Arbitrary File Upload CVE-2022-4949 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 25, 2022
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 12, 2022
WordPress Popular Posts <= 5.3.2 - Authenticated Arbitrary File Upload CVE-2021-42362 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 12, 2021
Catch Themes Demo Import <= 1.7 - Arbitrary File Upload CVE-2021-39352 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 21, 2021
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload CVE-2021-4330 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 21, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation