Vulnerabilities protected by our Directory Traversal (Requesting wp-config.php) firewall rule

555,069
Attacks Blocked in Past 24 Hours

Showing 61-80 of 225 Vulnerabilities

Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
6.5
CVE-2021-24692
Sep 2, 2021
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
WP Fastest Cache <= 0.9.1.6 - Authenticated (Admin+) Directory Traversal to Arbitrary File Deletion
6.5
CVE-2021-20714
Apr 27, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
6.5
CVE-2020-36728
Jul 7, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Simple File List <= 4.2.7 - Arbitrary File Deletion
6.5
CVE-2020-12832
May 16, 2020
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal
6.5
CVE-2019-15648
Jul 2, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
WP Cost Estimation < 9.660 - Upload Directory Traversal
6.5
CVE ID Unknown
Feb 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
6.5
CVE ID Unknown
Jan 4, 2018
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Insert Pages < 3.2.4 - Authenticated Directory Traversal
6.5
CVE-2017-18586
Sep 29, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access
6.5
CVE-2016-7169
Sep 7, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Nelio AB Testing < 4.5.0 - Directory Traversal
6.5
CVE-2016-10977
May 10, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NextGen Gallery <= 2.1.7 - Path Traversal
6.5
CVE ID Unknown
Aug 28, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Easy2Map <= 1.2.4 - Directory Traversal
6.5
CVE-2015-4616
Jun 8, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
6.5
CVE ID Unknown
Apr 14, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Marketplace <= 2.4.0 - Path Traversal
6.5
CVE-2014-9014
Mar 21, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Cart66 Lite - WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure
6.5
CVE-2014-9461
Jan 1, 2015
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
WP DB Manager < 2.7.2 - Arbitrary File Read
6.5
CVE-2014-8336
Oct 13, 2014
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
WordPress Core < 2.1 - Directory Traversal
6.5
CVE-2007-0541
Jan 24, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
WordPress Core <= 2.0.4 - Directory Traversal
6.5
CVE-2006-5705
Oct 27, 2006
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
6.6
CVE-2022-1476
Apr 28, 2022
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal
6.8
CVE ID Unknown
Sep 19, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download CVE-2021-24692 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N September 2, 2021
WP Fastest Cache <= 0.9.1.6 - Authenticated (Admin+) Directory Traversal to Arbitrary File Deletion CVE-2021-20714 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H April 27, 2021
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal CVE-2020-36728 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N July 7, 2020
Simple File List <= 4.2.7 - Arbitrary File Deletion CVE-2020-12832 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L May 16, 2020
Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal CVE-2019-15648 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N July 2, 2019
WP Cost Estimation < 9.660 - Upload Directory Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L February 14, 2019
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H January 4, 2018
Insert Pages < 3.2.4 - Authenticated Directory Traversal CVE-2017-18586 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N September 29, 2017
WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access CVE-2016-7169 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N September 7, 2016
Nelio AB Testing < 4.5.0 - Directory Traversal CVE-2016-10977 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N May 10, 2016
NextGen Gallery <= 2.1.7 - Path Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N August 28, 2015
Easy2Map <= 1.2.4 - Directory Traversal CVE-2015-4616 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N June 8, 2015
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N April 14, 2015
Marketplace <= 2.4.0 - Path Traversal CVE-2014-9014 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N March 21, 2015
Cart66 Lite - WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure CVE-2014-9461 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N January 1, 2015
WP DB Manager < 2.7.2 - Arbitrary File Read CVE-2014-8336 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N October 13, 2014
WordPress Core < 2.1 - Directory Traversal CVE-2007-0541 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N January 24, 2007
WordPress Core <= 2.0.4 - Directory Traversal CVE-2006-5705 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N October 27, 2006
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts CVE-2022-1476 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H April 28, 2022
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N September 19, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation