Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection	CVE-2021-24666	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	August 24, 2021
BuddyPress <= 9.0.0 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	August 18, 2021
Listing, Classified Ads & Business Directory – uListing <= 2.0.3 - Unauthenticated SQL Injection	CVE-2021-36880	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	July 26, 2021
Edit Comments <= 0.3 - Unauthenticated SQL Injection	CVE-2021-24551	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	July 24, 2021
Astra Pro Addon <= 3.5.1 - Unauthenticated SQL Injection	CVE-2021-24507	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	July 8, 2021
Poll, Survey, Questionnaire and Voting system <= 1.5.2 - Unauthenticated Blind SQL Injection	CVE-2021-24442	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	June 22, 2021
Filebird 4.7.3 - Unauthenticated SQL Injection	CVE-2021-24385	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	June 16, 2021
Location Manager < 2.1.0.10 - SQL Injection	CVE-2021-24361	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	June 4, 2021
Bello - Directory & Listing <= 1.5.9 - Unauthenticated SQL Injection	CVE-2021-24321	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	May 16, 2021
Goto - Tour & Travel WordPress Theme < 2.1 - SQL Injection	CVE-2021-24314	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 26, 2021
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection	CVE-2021-24285	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 26, 2021
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 8, 2021
WPJobBoard <= 5.6.4 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	November 25, 2020
Good LMS <= 2.1.4 - Unauthenticated SQL Injection	CVE-2020-27481	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	November 12, 2020
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	November 8, 2020
WP Activity Log <= 4.1.4 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	November 4, 2020
Advanced Booking Calendar <= 1.6.1 - Unauthenticated SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 22, 2020
Loginizer <= 1.6.3 - SQL Injection	CVE-2020-27615	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 21, 2020
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection	CVE-2015-9324	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	September 22, 2020
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection	CVE-2019-13571	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	September 22, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our SQL Injection firewall rule

Showing 241-260 of 1,444 Vulnerabilities