Vulnerabilities protected by our SQL Injection firewall rule

908,567
Attacks Blocked in Past 24 Hours

Showing 1-20 of 946 vulnerabilities

Title CVE ID CVSS Vector Date
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection CVE-2023-1471 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 17, 2023
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection CVE-2023-28491 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N March 15, 2023
Be POPIA Compliant <= 1.2.0 - Unauthenticated SQL Injection CVE-2022-47445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 15, 2023
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection CVE-2023-26525 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 2, 2023
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes CVE-2023-0631 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N February 28, 2023
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode CVE-2023-0630 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 23, 2023
Paytm Payment Gateway <= 2.7.3 - Authenticated (Editor+) SQL Injection via 'post' CVE-2022-45805 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 22, 2023
WP Meta SEO <= 4.5.2 - Authenticated (Subscriber+) SQL Injection 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 22, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters CVE-2023-0037 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 20, 2023
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection CVE-2023-0895 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 17, 2023
Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection CVE-2023-0279 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 16, 2023
GamiPress <= 2.5.7 - Unauthenticated SQL Injection CVE-2023-24000 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2023
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter CVE-2023-25047 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 13, 2023
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value CVE-2023-25045 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H February 13, 2023
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection CVE-2022-44580 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 8, 2023
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection CVE-2023-0381 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H February 6, 2023
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection CVE-2022-38074 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 31, 2023
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection CVE-2023-0278 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 31, 2023
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection CVE-2022-47588 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H January 27, 2023
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection CVE-2022-47151 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N January 27, 2023

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation