Vulnerabilities protected by our Malicious File Upload firewall rule

209,345
Attacks Blocked in Past 24 Hours

Showing 21-40 of 464 Vulnerabilities

Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51412
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51473
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-51475
Dec 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-49815
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-6316
Dec 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-6585
Nov 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-5601
Oct 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-45603
Oct 10, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-38388
Aug 22, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Kadence Blocks <= 3.1.10 - Unauthenticated Arbitrary File Upload
9.8
CVE ID Unknown
Aug 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
9.8
CVE-2023-29384
Aug 1, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
9.8
CVE-2022-4774
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zendrop – Global Dropshipping <= 1.0.0 - Arbitrary File Upload
9.8
CVE-2023-25970
Feb 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-46839
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2023-23656
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-4395
Jan 4, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Themes from Chimpstudio and Pixfill (Various Versions) - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-0316
Dec 29, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
JobBoardWP <= 1.2.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-4061
Nov 28, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-45359
Nov 22, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
9.8
CVE-2022-3982
Nov 21, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload CVE-2023-51412 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload CVE-2023-51473 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload CVE-2023-51475 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2023
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload CVE-2023-49815 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 5, 2023
MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload CVE-2023-6316 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 4, 2023
WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload CVE-2023-6585 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 24, 2023
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload CVE-2023-5601 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 16, 2023
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload CVE-2023-45603 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H October 10, 2023
JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload CVE-2023-38388 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 22, 2023
Kadence Blocks <= 3.1.10 - Unauthenticated Arbitrary File Upload 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 9, 2023
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume' CVE-2023-29384 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 1, 2023
Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2022-4774 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 19, 2023
Zendrop – Global Dropshipping <= 1.0.0 - Arbitrary File Upload CVE-2023-25970 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 24, 2023
JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload CVE-2022-46839 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 27, 2023
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload CVE-2023-23656 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2023
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload CVE-2022-4395 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 4, 2023
Themes from Chimpstudio and Pixfill (Various Versions) - Unauthenticated Arbitrary File Upload CVE-2022-0316 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 29, 2022
JobBoardWP <= 1.2.1 - Unauthenticated Arbitrary File Upload CVE-2022-4061 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 28, 2022
Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload CVE-2022-45359 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 22, 2022
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload CVE-2022-3982 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H November 21, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation