Vulnerabilities protected by our SQL Injection firewall rule

1,698,211
Attacks Blocked in Past 24 Hours

Showing 1481-1500 of 1,501 Vulnerabilities

Title CVE ID CVSS Vector Date
Post SMTP <= 2.9.9 - Authenticated (Administrator+) SQL Injection CVE-2024-52436 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N November 15, 2024
Premium Packages <= 5.9.3 - Authenticated (Administrator+) SQL Injection CVE-2024-52435 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N November 15, 2024
BetterLinks <= 2.1.7 - Authenticated (Administrator+) SQL Injection CVE-2024-51672 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N November 1, 2024
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.4 - Authenticated (Admin+) SQL injection CVE-2024-9828 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 31, 2024
Product Filter by WBW <= 2.7.0 - Authenticated (Administrator+) SQL Injection CVE-2024-49691 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 21, 2024
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection CVE-2019-25218 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 18, 2024
Surfer <= 1.5.0.502 - Authenticated (Administrator+) SQL Injection CVE-2024-49299 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 15, 2024
ShortPixel Image Optimizer <= 5.6.3 - Authenticated (Editor+) SQL Injection CVE-2024-48043 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 13, 2024
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection CVE-2024-8625 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 30, 2024
WPExperts Square For GiveWP <= 1.3 - Authenticated (Administrator+) SQL Injection CVE-2024-47338 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 26, 2024
Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL Injection CVE-2024-47335 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 26, 2024
Zoho Flow for WordPress <= 2.8.0 - Authenticated (Administrator+) SQL Injection CVE-2024-47334 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 26, 2024
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection CVE-2024-47328 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 25, 2024
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection CVE-2024-42404 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 18, 2024
video carousel slider with lightbox <= 1.0.6 - Authenticated (Admin+) SQL Injection CVE-2019-25212 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 10, 2024
Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-8379 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 9, 2024
Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection CVE-2024-43969 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 28, 2024
AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection CVE-2024-6723 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 22, 2024
Adicon Server <= 1.2 - Authenticated (Admin+) SQL Injection CVE-2024-7766 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 22, 2024
Icegram Email Subscribers & Newsletters <= 4.5.0 - Authenticated SQL Injection CVE-2020-5768 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N July 16, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation