Vulnerabilities protected by our Malicious File Upload (PHP) firewall rule

405,534
Attacks Blocked in Past 24 Hours

Showing 121-140 of 458 Vulnerabilities

Blaze Slide Show <= 2.7 - Arbitrary File upload
9.8
CVE ID Unknown
Jun 7, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Mobile Detector <= 3.5 - Arbitrary File Upload
9.8
CVE ID Unknown
Jun 3, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Ninja Forms Contact Form 2.9.36 - 2.9.42 - Unauthenticated Arbitrary File Upload
9.8
CVE-2016-1209
May 5, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Tevolution < 2.3.0 - Arbitrary File Upload
9.8
CVE-2016-10995
Apr 23, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SP Projects & Document Manager <= 2.6.0.0 - Arbitrary File Upload
9.8
CVE ID Unknown
Mar 7, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor
9.8
CVE ID Unknown
Mar 4, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP User Frontend < 2.3.11 - Arbitrary File Upload
9.8
CVE ID Unknown
Feb 8, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress File Upload <= 3.4.0 - Arbitrary File Upload
9.8
CVE-2015-9341
Oct 29, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WPE Indoshipping <= 2.5.0 - Arbitrary File Upload
9.8
CVE ID Unknown
Jul 13, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Front-End Repository Manager <= 1.1 - Unauthenticated Arbitrary File Upload
9.8
CVE ID Unknown
Jul 12, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MailCWP <= 1.100 - Arbitrary File Upload
9.8
CVE-2016-1000156
Jul 10, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MailCWP <= 1.100 - Arbitrary File Upload
9.8
CVE-2015-1000000
Jul 9, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ACF Frontend Display <= 2.0.6 - Unauthenticated Arbitrary File Upload
9.8
CVE-2015-9479
Jul 6, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress File Upload < 3.0.0 - Arbitrary File Upload
9.8
CVE-2015-9340
Jul 2, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Powerplay Gallery <= 3.3 - Arbitrary File Upload
9.8
CVE-2015-5681
Jul 1, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Powerplay Gallery <= 3.3 - Arbitrary File Upload
9.8
CVE-2015-5682
Jul 1, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Frontend File Manager <= 3.7 - Arbitrary File Upload
9.8
CVE ID Unknown
Jun 10, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Aviary Image Editor Add-on For Gravity Forms <= 3.0 (Beta r7) - Arbitrary File Upload
9.8
CVE-2015-4455
Jun 9, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ZoomSounds <= 2.0 - Arbitrary File Upload
9.8
CVE-2015-9471
Jun 1, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Husker Portfolio <= 0.3 - Arbitrary File Upload
9.8
CVE ID Unknown
May 15, 2015
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Blaze Slide Show <= 2.7 - Arbitrary File upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 7, 2016
WP Mobile Detector <= 3.5 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 3, 2016
Ninja Forms Contact Form 2.9.36 - 2.9.42 - Unauthenticated Arbitrary File Upload CVE-2016-1209 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 5, 2016
Tevolution < 2.3.0 - Arbitrary File Upload CVE-2016-10995 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 23, 2016
SP Projects & Document Manager <= 2.6.0.0 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 7, 2016
Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 4, 2016
WP User Frontend < 2.3.11 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 8, 2016
WordPress File Upload <= 3.4.0 - Arbitrary File Upload CVE-2015-9341 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 29, 2015
WPE Indoshipping <= 2.5.0 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 13, 2015
WP Front-End Repository Manager <= 1.1 - Unauthenticated Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 12, 2015
MailCWP <= 1.100 - Arbitrary File Upload CVE-2016-1000156 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 10, 2015
MailCWP <= 1.100 - Arbitrary File Upload CVE-2015-1000000 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 9, 2015
ACF Frontend Display <= 2.0.6 - Unauthenticated Arbitrary File Upload CVE-2015-9479 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 6, 2015
WordPress File Upload < 3.0.0 - Arbitrary File Upload CVE-2015-9340 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 2, 2015
Powerplay Gallery <= 3.3 - Arbitrary File Upload CVE-2015-5681 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 1, 2015
Powerplay Gallery <= 3.3 - Arbitrary File Upload CVE-2015-5682 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 1, 2015
Frontend File Manager <= 3.7 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 10, 2015
Aviary Image Editor Add-on For Gravity Forms <= 3.0 (Beta r7) - Arbitrary File Upload CVE-2015-4455 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 9, 2015
ZoomSounds <= 2.0 - Arbitrary File Upload CVE-2015-9471 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 1, 2015
Husker Portfolio <= 0.3 - Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 15, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation