Vulnerabilities protected by our SQL Injection firewall rule

1,713,707
Attacks Blocked in Past 24 Hours

Showing 1461-1480 of 1,501 Vulnerabilities

Title CVE ID CVSS Vector Date
YITH WooCommerce Wishlist <= 2.1.2 - SQL Injection 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2018
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection CVE-2024-0685 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N February 1, 2024
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection CVE-2023-50838 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 21, 2023
AutomateWoo <= 5.7.1 - Authenticated (Shop manager+) SQL Injection CVE-2023-32743 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N May 15, 2023
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection CVE-2022-4352 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 8, 2022
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection CVE-2022-4351 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N December 8, 2022
Jetpack CRM <= 5.4.2 - Authenticated (Administrator+) Cross-Site Scripting CVE-2022-3919 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N November 21, 2022
Easy Social Icons <= 3.1.3 - Admin+ SQL Injection CVE-2022-0887 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N March 8, 2022
Random Text <= 0.3.0 - Authenticated (Subscriber+) SQL Injection CVE-2023-0388 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N April 3, 2023
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N June 27, 2017
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection CVE-2024-10540 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N November 1, 2024
WP Symposium < 15.4 - SQL Injection CVE-2015-3325 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N April 14, 2015
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate() CVE-2024-11713 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 13, 2024
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox() CVE-2024-11714 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 13, 2024
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection CVE-2024-11710 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 13, 2024
SeedProd Pro <= 6.18.10 - Authenticated (Editor+) SQL Injection CVE-2024-54283 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 11, 2024
SeedProd Pro <= 6.18.10 - Authenticated (Administrator+) SQL Injection CVE-2024-54284 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 11, 2024
NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection CVE-2024-53808 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 2, 2024
Connexion Logs <= 3.0.2 - Authenticated (Admin+) SQL Injection CVE-2024-11372 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 2, 2024
Product Labels For Woocommerce <= 1.5.8 - Authenticated (Administrator+) SQL Injection CVE-2024-53817 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N December 2, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation