Vulnerabilities protected by our Directory Traversal (Requesting wp-config.php) firewall rule

399,893
Attacks Blocked in Past 24 Hours

Showing 61-80 of 225 Vulnerabilities

Ultimate Member <= 2.0.3 - Directory Traversal
4.3
CVE-2018-0586
Aug 12, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WP Fastest Cache <= 0.8.9.5 - Directory Traversal
9.1
CVE-2019-13635
Jul 28, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
WPS Child Theme Generator < 1.2 - Directory Traversal
9.8
CVE-2019-15822
Jul 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion
7.5
CVE-2019-14206
Jul 19, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
7.5
CVE-2019-15323
Jul 12, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal
6.5
CVE-2019-15648
Jul 2, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Import and export users and customers <= 1.14.2.1 - Directory Traversal
7.5
CVE-2019-15326
Jun 20, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Simple File List <= 3.2.7 - Arbitrary File Download
7.5
CVE-2022-1119
May 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Simple File List <= 3.2.4 - Arbitrary File Deletion
8.6
CVE ID Unknown
May 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read
9.4
CVE ID Unknown
May 13, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
WP Cost Estimation < 9.660 - Upload Directory Traversal
6.5
CVE ID Unknown
Feb 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
4.3
CVE ID Unknown
Jan 25, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WebP Express < 0.14.11 - Arbitrary File Read
7.5
CVE-2019-15330
Dec 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Media from FTP Plugin < 9.85 - Directory Traversal
7.5
CVE-2018-5310
Nov 13, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WooCommerce <= 3.4.5 - WooCommerce File Deletion
7.2
CVE-2018-20714
Nov 6, 2018
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
8.7
CVE ID Unknown
Oct 22, 2018
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
7.5
CVE-2018-15818
Oct 17, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
微信群发助手-Wechat Broadcast <= 1.2.0 - Directory Traversal
9.8
CVE-2018-16283
Sep 19, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Localize My Post <= 1.0 - Directory Traversal
7.5
CVE-2018-16299
Sep 19, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
7.5
CVE ID Unknown
Sep 1, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
Ultimate Member <= 2.0.3 - Directory Traversal CVE-2018-0586 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 12, 2019
WP Fastest Cache <= 0.8.9.5 - Directory Traversal CVE-2019-13635 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N July 28, 2019
WPS Child Theme Generator < 1.2 - Directory Traversal CVE-2019-15822 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 23, 2019
Adaptive Images for WordPress <= 0.6.66 - Arbitrary File Deletion CVE-2019-14206 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N July 19, 2019
Ad Inserter <= 2.4.19 - Authenticated Path Traversal CVE-2019-15323 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N July 12, 2019
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal CVE-2019-15648 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N July 2, 2019
Import and export users and customers <= 1.14.2.1 - Directory Traversal CVE-2019-15326 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N June 20, 2019
Simple File List <= 3.2.7 - Arbitrary File Download CVE-2022-1119 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 23, 2019
Simple File List <= 3.2.4 - Arbitrary File Deletion 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N May 23, 2019
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L May 13, 2019
WP Cost Estimation < 9.660 - Upload Directory Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L February 14, 2019
Health Check & Troubleshooting <= 1.2.3 - Path Traversal 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N January 25, 2019
WebP Express < 0.14.11 - Arbitrary File Read CVE-2019-15330 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N December 11, 2018
Media from FTP Plugin < 9.85 - Directory Traversal CVE-2018-5310 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N November 13, 2018
WooCommerce <= 3.4.5 - WooCommerce File Deletion CVE-2018-20714 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 6, 2018
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H October 22, 2018
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal CVE-2018-15818 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N October 17, 2018
微信群发助手-Wechat Broadcast <= 1.2.0 - Directory Traversal CVE-2018-16283 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 19, 2018
Localize My Post <= 1.0 - Directory Traversal CVE-2018-16299 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 19, 2018
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 1, 2018

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation