Vulnerabilities protected by our Directory Traversal firewall rule

1,957,885
Attacks Blocked in Past 24 Hours

Showing 21-40 of 279 Vulnerabilities

Ultimate Member <= 2.0.39 - Directory Traversal
4.3
CVE-2018-0588
May 10, 2018
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 4.8.2 - Directory Traversal during unzip
4.3
CVE-2017-14719
Sep 19, 2017
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure
4.3
CVE ID Unknown
Dec 31, 2016
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Directory Traversal
4.7
CVE-2022-2445
Oct 28, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read
4.9
CVE-2024-1790
Mar 26, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
4.9
CVE-2024-2294
Mar 15, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
4.9
CVE-2023-2688
May 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal
4.9
CVE-2023-1427
Mar 21, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
4.9
CVE-2023-23872
Feb 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal
4.9
CVE-2022-47595
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure
4.9
CVE ID Unknown
Nov 1, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download
4.9
CVE-2022-3762
Oct 31, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
4.9
CVE-2022-2926
Sep 5, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal
4.9
CVE ID Unknown
Aug 31, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
4.9
CVE-2022-2945
Aug 22, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Read
4.9
CVE-2022-35235
Aug 9, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read
4.9
CVE-2022-31475
Jul 12, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
String Locator <= 2.4.2 - Authenticated Arbitrary File Read
4.9
CVE-2022-0493
Mar 1, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
OMGF <= 4.5.11 - Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal
4.9
CVE-2021-25021
Dec 1, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CAOS <= 4.1.8 - Admin+ Arbitrary Folder Deletion via Path Traversal
4.9
CVE-2021-25020
Dec 1, 2021
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Title CVE ID CVSS Vector Date
Ultimate Member <= 2.0.39 - Directory Traversal CVE-2018-0588 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 10, 2018
WordPress Core < 4.8.2 - Directory Traversal during unzip CVE-2017-14719 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N September 19, 2017
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N December 31, 2016
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Directory Traversal CVE-2022-2445 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L October 28, 2022
Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read CVE-2024-1790 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N March 26, 2024
Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal CVE-2024-2294 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N March 15, 2024
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CVE-2023-2688 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N May 23, 2023
Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal CVE-2023-1427 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N March 21, 2023
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal CVE-2023-23872 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N February 23, 2023
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal CVE-2022-47595 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N January 20, 2023
Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N November 1, 2022
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download CVE-2022-3762 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N October 31, 2022
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal CVE-2022-2926 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N September 5, 2022
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 31, 2022
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal CVE-2022-2945 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 22, 2022
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Read CVE-2022-35235 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N August 9, 2022
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read CVE-2022-31475 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N July 12, 2022
String Locator <= 2.4.2 - Authenticated Arbitrary File Read CVE-2022-0493 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N March 1, 2022
OMGF <= 4.5.11 - Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal CVE-2021-25021 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N December 1, 2021
CAOS <= 4.1.8 - Admin+ Arbitrary Folder Deletion via Path Traversal CVE-2021-25020 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N December 1, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation