Vulnerabilities protected by our SQL Injection firewall rule

Title	CVE ID	CVSS	Vector	Date
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection	CVE-2023-1471	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	March 17, 2023
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection	CVE-2023-28491	6.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N	March 15, 2023
Be POPIA Compliant <= 1.2.0 - Unauthenticated SQL Injection	CVE-2022-47445	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 15, 2023
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection	CVE-2023-26525	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	March 2, 2023
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes	CVE-2023-0631	7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	February 28, 2023
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode	CVE-2023-0630	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 23, 2023
Paytm Payment Gateway <= 2.7.3 - Authenticated (Editor+) SQL Injection via 'post'	CVE-2022-45805	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 22, 2023
WP Meta SEO <= 4.5.2 - Authenticated (Subscriber+) SQL Injection		8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 22, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters	CVE-2023-0037	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 20, 2023
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection	CVE-2023-0895	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 17, 2023
Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection	CVE-2023-0279	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 16, 2023
GamiPress <= 2.5.7 - Unauthenticated SQL Injection	CVE-2023-24000	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 14, 2023
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter	CVE-2023-25047	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 13, 2023
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value	CVE-2023-25045	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 13, 2023
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection	CVE-2022-44580	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 8, 2023
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection	CVE-2023-0381	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 6, 2023
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection	CVE-2022-38074	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	January 31, 2023
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection	CVE-2023-0278	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	January 31, 2023
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection	CVE-2022-47588	9.1	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	January 27, 2023
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection	CVE-2022-47151	8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	January 27, 2023

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation