Vulnerabilities protected by our Directory Traversal firewall rule

2,195,639
Attacks Blocked in Past 24 Hours

Showing 121-140 of 279 Vulnerabilities

Simple File List <= 3.2.7 - Arbitrary File Download
7.5
CVE-2022-1119
May 23, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read
9.4
CVE ID Unknown
May 13, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
WP Cost Estimation < 9.660 - Upload Directory Traversal
6.5
CVE ID Unknown
Feb 14, 2019
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
4.3
CVE ID Unknown
Jan 25, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WebP Express < 0.14.11 - Arbitrary File Read
7.5
CVE-2019-15330
Dec 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Media from FTP Plugin < 9.85 - Directory Traversal
7.5
CVE-2018-5310
Nov 13, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WooCommerce <= 3.4.5 - WooCommerce File Deletion
7.2
CVE-2018-20714
Nov 6, 2018
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
8.7
CVE ID Unknown
Oct 22, 2018
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
7.5
CVE-2018-15818
Oct 17, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
微信群发助手-Wechat Broadcast <= 1.2.0 - Directory Traversal
9.8
CVE-2018-16283
Sep 19, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Localize My Post <= 1.0 - Directory Traversal
7.5
CVE-2018-16299
Sep 19, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
7.5
CVE ID Unknown
Sep 1, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Media File Manager <= 1.4.2 - Directory Traversal to Directory Listing
5.3
CVE-2018-19040
May 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read
5.3
CVE-2018-19043
May 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Relocation
9.8
CVE-2018-19042
May 11, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Ultimate Member <= 2.0.39 - Directory Traversal
4.3
CVE-2018-0588
May 10, 2018
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WP Background Takeover < 4.1.5 - Directory Traversal
7.5
CVE-2018-9118
Apr 6, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5287
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5291
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
GD Rating System <= 2.3 - Directory Traversal
7.5
CVE-2018-5290
Jan 8, 2018
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
Simple File List <= 3.2.7 - Arbitrary File Download CVE-2022-1119 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N May 23, 2019
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.0.45 - Arbitrary File Deletion/Read 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L May 13, 2019
WP Cost Estimation < 9.660 - Upload Directory Traversal 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L February 14, 2019
Health Check & Troubleshooting <= 1.2.3 - Path Traversal 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N January 25, 2019
WebP Express < 0.14.11 - Arbitrary File Read CVE-2019-15330 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N December 11, 2018
Media from FTP Plugin < 9.85 - Directory Traversal CVE-2018-5310 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N November 13, 2018
WooCommerce <= 3.4.5 - WooCommerce File Deletion CVE-2018-20714 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 6, 2018
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H October 22, 2018
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal CVE-2018-15818 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N October 17, 2018
微信群发助手-Wechat Broadcast <= 1.2.0 - Directory Traversal CVE-2018-16283 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 19, 2018
Localize My Post <= 1.0 - Directory Traversal CVE-2018-16299 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 19, 2018
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 1, 2018
Media File Manager <= 1.4.2 - Directory Traversal to Directory Listing CVE-2018-19040 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 11, 2018
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Read CVE-2018-19043 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N May 11, 2018
Media File Manager <= 1.4.2 - Directory Traversal to Arbitrary File Relocation CVE-2018-19042 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 11, 2018
Ultimate Member <= 2.0.39 - Directory Traversal CVE-2018-0588 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 10, 2018
WP Background Takeover < 4.1.5 - Directory Traversal CVE-2018-9118 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N April 6, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5287 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5291 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018
GD Rating System <= 2.3 - Directory Traversal CVE-2018-5290 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 8, 2018

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation