Vulnerabilities protected by our Malicious File Upload firewall rule

646,511
Attacks Blocked in Past 24 Hours

Showing 21-40 of 472 Vulnerabilities

Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-7082
Dec 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6826
Dec 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6636
Dec 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-6558
Dec 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-49814
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-6090
Nov 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6219
Nov 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
7.2
CVE-2023-47842
Nov 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
7.2
CVE-2023-47784
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-5860
Nov 1, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-4861
Sep 19, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page
7.2
CVE-2023-4238
Aug 28, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Olive One Click Demo Import <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload in olive_one_click_demo_import_save_file
7.2
CVE-2023-29102
Aug 28, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-25444
Aug 17, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Slider Revolution <= 6.6.12 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-2359
May 22, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-0924
Apr 4, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-27440
Mar 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2022-3416
Dec 19, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
PostmagThemes Demo Import <= 1.0.9 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2022-1540
Nov 11, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Theme Demo Import <= 1.1.1 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2022-1538
Nov 8, 2022
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-7082 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 29, 2023
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6826 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 13, 2023
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6636 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6558 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-49814 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6090 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6219 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload CVE-2023-47842 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 20, 2023
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload CVE-2023-47784 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 14, 2023
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-5860 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 1, 2023
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-4861 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 19, 2023
Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page CVE-2023-4238 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 28, 2023
Olive One Click Demo Import <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload in olive_one_click_demo_import_save_file CVE-2023-29102 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 28, 2023
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-25444 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 17, 2023
Slider Revolution <= 6.6.12 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-2359 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H May 22, 2023
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-0924 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 4, 2023
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-27440 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 3, 2023
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-3416 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 19, 2022
PostmagThemes Demo Import <= 1.0.9 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-1540 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 11, 2022
Theme Demo Import <= 1.1.1 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-1538 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 8, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation