Vulnerabilities protected by our LFI: Local File Inclusion firewall rule

433,092
Attacks Blocked in Past 24 Hours

Showing 41-60 of 160 Vulnerabilities

WP Dark Mode <= 4.0.7 - Authenticated (Subscriber+) Local File Inclusion via 'style'
8.8
CVE-2023-0467
Mar 6, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
8.8
CVE-2023-23700
Feb 27, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode
8.8
CVE-2023-0340
Feb 22, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Extensive VC Addons for WPBakery page builder <= 1.9 - Unauthenticated Local File Inclusion
9.1
CVE-2023-0159
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion
9.8
CVE-2022-47615
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Amazon Affiliate <= 3.12.2 - Reflected File Download
9.8
CVE-2022-4794
Jan 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
InPost Gallery <= 2.1.4.1 - Local File Inclusion
9.8
CVE-2022-4063
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download
7.5
CVE-2022-4106
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Wholesale Market for WooCommerce <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Download
4.9
CVE-2022-4108
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion
7.2
CVE-2022-44634
Nov 10, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SearchWP Live Ajax Search <= 1.6.2 - Directory Traversal and Local File Inclusion
9.1
CVE-2022-3227
Sep 15, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
8.2
CVE ID Unknown
Aug 15, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
VR Calendar <= 2.4.0 - Authenticated (Administrator+) Local File Inclusion
6.8
CVE ID Unknown
Jul 28, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
8.1
CVE-2022-1657
May 18, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Popup Box <= 2.1.2 - Authenticated Local File Inclusion
6.8
CVE-2022-29445
May 17, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Counter Box <= 1.1.1 - Authenticated Local File Inclusion
6.8
CVE-2022-29446
May 16, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Hover Effects – easily create any hover effect <= 2.1 - Authenticated Local File Inclusion
6.8
CVE-2022-29447
May 16, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Herd Effects <= 5.2 - Local File Inclusion
7.2
CVE-2022-29448
May 16, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Cab fare calculator <= 1.0.3 - Unauthenticated Local File Inclusion
6.5
CVE-2022-1391
Apr 20, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion
9.8
CVE-2022-1392
Mar 30, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
WP Dark Mode <= 4.0.7 - Authenticated (Subscriber+) Local File Inclusion via 'style' CVE-2023-0467 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 6, 2023
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion CVE-2023-23700 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 27, 2023
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2023-0340 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 22, 2023
Extensive VC Addons for WPBakery page builder <= 1.9 - Unauthenticated Local File Inclusion CVE-2023-0159 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N January 23, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion CVE-2022-47615 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
Amazon Affiliate <= 3.12.2 - Reflected File Download CVE-2022-4794 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 4, 2023
InPost Gallery <= 2.1.4.1 - Local File Inclusion CVE-2022-4063 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 28, 2022
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download CVE-2022-4106 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N November 28, 2022
Wholesale Market for WooCommerce <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Download CVE-2022-4108 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N November 28, 2022
S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion CVE-2022-44634 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 10, 2022
SearchWP Live Ajax Search <= 1.6.2 - Directory Traversal and Local File Inclusion CVE-2022-3227 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N September 15, 2022
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N August 15, 2022
VR Calendar <= 2.4.0 - Authenticated (Administrator+) Local File Inclusion 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N July 28, 2022
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion CVE-2022-1657 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N May 18, 2022
Popup Box <= 2.1.2 - Authenticated Local File Inclusion CVE-2022-29445 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H May 17, 2022
Counter Box <= 1.1.1 - Authenticated Local File Inclusion CVE-2022-29446 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H May 16, 2022
Hover Effects – easily create any hover effect <= 2.1 - Authenticated Local File Inclusion CVE-2022-29447 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H May 16, 2022
Herd Effects <= 5.2 - Local File Inclusion CVE-2022-29448 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 16, 2022
Cab fare calculator <= 1.0.3 - Unauthenticated Local File Inclusion CVE-2022-1391 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N April 20, 2022
Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion CVE-2022-1392 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 30, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation