Vulnerabilities protected by our Directory Traversal (Requesting wp-config.php) firewall rule

557,589
Attacks Blocked in Past 24 Hours

Showing 41-60 of 225 Vulnerabilities

Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
7.5
CVE-2020-36696
Aug 3, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Duplicator < 1.3.28 - Directory Traversal
7.5
CVE-2020-11738
Feb 28, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
ARforms <= 3.7.1 - Unauthenticated Arbitrary File Deletion
7.5
CVE-2019-16902
Oct 11, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion
7.5
CVE-2019-14206
Jul 19, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
7.5
CVE-2019-15323
Jul 12, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Import and export users and customers <= 1.14.2.1 - Directory Traversal
7.5
CVE-2019-15326
Jun 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Simple File List <= 3.2.7 - Arbitrary File Download
7.5
CVE-2022-1119
May 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WebP Express < 0.14.11 - Arbitrary File Read
7.5
CVE-2019-15330
Dec 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Media from FTP Plugin < 9.85 - Directory Traversal
7.5
CVE-2018-5310
Nov 13, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
7.5
CVE-2018-15818
Oct 17, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Localize My Post <= 1.0 - Directory Traversal
7.5
CVE-2018-16299
Sep 19, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
7.5
CVE ID Unknown
Sep 1, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WP Background Takeover < 4.1.5 - Directory Traversal
7.5
CVE-2018-9118
Apr 6, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5289
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5290
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5291
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5287
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
JQueryFileTree <= 2.1.5 - Directory Traversal
7.5
CVE-2017-1000170
May 8, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Javo Spot < 3.0.0 - Directory Traversal
7.5
CVE ID Unknown
Feb 9, 2017
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal
7.5
CVE ID Unknown
Jul 11, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization CVE-2020-36696 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N August 3, 2020
Duplicator < 1.3.28 - Directory Traversal CVE-2020-11738 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N February 28, 2020
ARforms <= 3.7.1 - Unauthenticated Arbitrary File Deletion CVE-2019-16902 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N October 11, 2019
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion CVE-2019-14206 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N July 19, 2019
Ad Inserter <= 2.4.19 - Authenticated Path Traversal CVE-2019-15323 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N July 12, 2019
Import and export users and customers <= 1.14.2.1 - Directory Traversal CVE-2019-15326 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N June 20, 2019
Simple File List <= 3.2.7 - Arbitrary File Download CVE-2022-1119 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 23, 2019
WebP Express < 0.14.11 - Arbitrary File Read CVE-2019-15330 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N December 11, 2018
Media from FTP Plugin < 9.85 - Directory Traversal CVE-2018-5310 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N November 13, 2018
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal CVE-2018-15818 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N October 17, 2018
Localize My Post <= 1.0 - Directory Traversal CVE-2018-16299 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 19, 2018
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 1, 2018
WP Background Takeover < 4.1.5 - Directory Traversal CVE-2018-9118 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N April 6, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5289 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5290 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5291 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5287 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
JQueryFileTree <= 2.1.5 - Directory Traversal CVE-2017-1000170 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 8, 2017
Javo Spot < 3.0.0 - Directory Traversal 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N February 9, 2017
SEO Plugin by Squirrly SEO < 6.1.5 - Directory Traversal 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N July 11, 2016

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation