Vulnerabilities protected by our LFI: Local File Inclusion firewall rule

451,828
Attacks Blocked in Past 24 Hours

Showing 1-20 of 251 Vulnerabilities

Title CVE ID CVSS Vector Date
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion CVE-2024-12209 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 7, 2024
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion CVE-2024-11289 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2024
Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-11429 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H December 4, 2024
Lenxel Core <= 1.1 - Authenticated (Contributor+) Local File Inclusion CVE-2024-53790 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 29, 2024
LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion CVE-2024-10873 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 22, 2024
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion CVE-2024-10898 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 20, 2024
Ads Booster by Ads Pro <= 1.12 - Unauthenticated Local File Inclusion CVE-2024-52428 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 15, 2024
LUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File Read CVE-2024-10816 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N November 12, 2024
Team Member <= 7.3 - Authenticated (Editor+) Local File Inclusion CVE-2024-52385 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 11, 2024
ZIJ KART <= 1.1 - Unauthenticated Local File Inclusion CVE-2024-52381 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 11, 2024
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion CVE-2024-52386 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H November 11, 2024
Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion CVE-2024-10871 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 8, 2024
WP Hotel Booking <= 2.1.4 - Authenticated (Contributor+) Local File Inclusion CVE-2024-51582 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 31, 2024
WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion CVE-2024-10436 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 28, 2024
Advanced Online Ordering and Delivery Platform <= 2.0.0 - Unauthenticated Local File Inclusion CVE-2024-50497 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 25, 2024
WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion CVE-2024-8392 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 25, 2024
Meta News <= 1.1.7 - Unauthenticated Local File Inclusion CVE-2024-50435 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2024
NewsCard <= 1.3 - Unauthenticated Local File Inclusion CVE-2024-50434 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 24, 2024
Qode Essential Addons <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-50457 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 24, 2024
The Pack Elementor addons <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion CVE-2024-50453 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H October 24, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation