Vulnerabilities protected by our Directory Traversal firewall rule

2,321,271
Attacks Blocked in Past 24 Hours

Showing 1-20 of 279 Vulnerabilities

File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
2.2
CVE-2023-5907
Nov 20, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2024-3034
Apr 26, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
2.7
CVE-2024-31342
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal
2.7
CVE-2024-30492
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2023-52144
Dec 28, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
2.7
CVE-2023-4216
Aug 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal
2.7
CVE-2023-2117
May 2, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal
2.7
CVE-2022-45833
Nov 30, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
3.8
CVE-2022-4031
Nov 29, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
4.1
CVE-2023-6120
Dec 8, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal
4.1
CVE ID Unknown
Jun 16, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
4.1
CVE ID Unknown
Jul 2, 2016
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
4.3
CVE-2024-31287
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
4.3
CVE-2024-1165
Feb 23, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download
4.3
CVE-2023-51401
Dec 26, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Image Optimizer by 10web <= 1.0.25 - Directory Traversal to Information Exposure
4.3
CVE ID Unknown
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
4.3
CVE-2022-3361
Oct 28, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
User Meta – User Profile Builder and User management plugin <= 2.4.3 - Path Traversal
4.3
CVE-2022-0779
May 16, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Ultimate Member <= 2.0.3 - Directory Traversal
4.3
CVE-2018-0586
Aug 12, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
4.3
CVE ID Unknown
Jan 25, 2019
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Title CVE ID CVSS Vector Date
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal CVE-2023-5907 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N November 20, 2023
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal CVE-2024-3034 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N April 26, 2024
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download CVE-2024-31342 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N April 5, 2024
Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal CVE-2024-30492 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N March 28, 2024
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal CVE-2023-52144 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N December 28, 2023
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url' CVE-2023-4216 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N August 14, 2023
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal CVE-2023-2117 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N May 2, 2023
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal CVE-2022-45833 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N November 30, 2022
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification CVE-2022-4031 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L November 29, 2022
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal CVE-2023-6120 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N December 8, 2023
Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N June 16, 2017
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N July 2, 2016
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal CVE-2024-31287 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 5, 2024
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal CVE-2024-1165 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N February 23, 2024
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download CVE-2023-51401 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N December 26, 2023
Image Optimizer by 10web <= 1.0.25 - Directory Traversal to Information Exposure 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N April 19, 2023
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes CVE-2022-3361 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N October 28, 2022
User Meta – User Profile Builder and User management plugin <= 2.4.3 - Path Traversal CVE-2022-0779 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 16, 2022
Ultimate Member <= 2.0.3 - Directory Traversal CVE-2018-0586 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 12, 2019
Health Check & Troubleshooting <= 1.2.3 - Path Traversal 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N January 25, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation