Vulnerabilities protected by our Malicious File Upload firewall rule

441,654
Attacks Blocked in Past 24 Hours

Showing 401-420 of 472 Vulnerabilities

Advanced AJAX Page Loader < 2.7.7 - Arbitrary File Upload
7.5
CVE-2016-10929
Jul 3, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Antioch <= 1.3 - Arbitrary File Download
7.5
CVE-2014-10397
Sep 8, 2014
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection
7.3
CVE-2016-5839
Jun 18, 2016
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG Upload
7.2
CVE-2024-4097
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2024-32836
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2024-3022
Apr 3, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload
7.2
CVE-2024-30231
Mar 26, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Zippy <= 1.6.9 - Authenticated (Editor+) Arbitrary File Upload
7.2
CVE-2024-27964
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file
7.2
CVE-2024-22152
Jan 16, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file
7.2
CVE-2024-22135
Jan 10, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-7082
Dec 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6826
Dec 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-6558
Dec 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6636
Dec 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-49814
Dec 5, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload
7.2
CVE-2023-6090
Nov 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-6219
Nov 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
7.2
CVE-2023-47842
Nov 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
7.2
CVE-2023-47784
Nov 14, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2023-5860
Nov 1, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Advanced AJAX Page Loader < 2.7.7 - Arbitrary File Upload CVE-2016-10929 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N July 3, 2016
Antioch <= 1.3 - Arbitrary File Download CVE-2014-10397 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N September 8, 2014
WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection CVE-2016-5839 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L June 18, 2016
Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG Upload CVE-2024-4097 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N April 30, 2024
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2024-32836 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 22, 2024
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload CVE-2024-3022 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 3, 2024
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File Upload CVE-2024-30231 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 26, 2024
Zippy <= 1.6.9 - Authenticated (Editor+) Arbitrary File Upload CVE-2024-27964 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 13, 2024
Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file CVE-2024-22152 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 16, 2024
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file CVE-2024-22135 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 10, 2024
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-7082 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 29, 2023
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6826 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 13, 2023
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6558 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6636 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 12, 2023
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-49814 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H December 5, 2023
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload CVE-2023-6090 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6219 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 27, 2023
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload CVE-2023-47842 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 20, 2023
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload CVE-2023-47784 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 14, 2023
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-5860 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 1, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation