Vulnerabilities protected by our SQL Injection firewall rule

3,102,468
Attacks Blocked in Past 24 Hours

Showing 21-40 of 1,269 Vulnerabilities

LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-31241
Apr 5, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
WP Advanced Search <= 1.1.6 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2024-3265
Apr 4, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2024-3217
Apr 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Rehub <= 19.6.1 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2024-31233
Apr 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2024-31234
Apr 3, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
9.8
CVE-2024-2879
Apr 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30535
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-31116
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30497
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2024-0608
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OSS Aliyun <= 1.4.10 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-30494
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-30491
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2024-30478
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection
10.0
CVE-2024-30502
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection
7.2
CVE-2024-0913
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP ERP <= 1.12.9 - Authenticated (AccountingManager+) SQL Injection
7.2
CVE-2024-0956
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ProfileGrid <= 5.7.8 - Unauthenticated SQL Injection
10.0
CVE-2024-30490
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30489
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Media Library Folders <= 8.1.7 - Authenticated (Author+) SQL Injection
9.9
CVE-2024-30486
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Zotpress <= 7.3.7 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30488
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
LearnPress Export Import <= 4.0.3 - Authenticated (Administrator+) SQL Injection CVE-2024-31241 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H April 5, 2024
WP Advanced Search <= 1.1.6 - Authenticated (Administrator+) SQL Injection CVE-2024-3265 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H April 4, 2024
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection CVE-2024-3217 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H April 4, 2024
Rehub <= 19.6.1 - Authenticated (Subscriber+) SQL Injection CVE-2024-31233 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H April 3, 2024
REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection CVE-2024-31234 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H April 3, 2024
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection CVE-2024-2879 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 2, 2024
Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection CVE-2024-30535 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 29, 2024
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection CVE-2024-31116 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H March 29, 2024
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) SQL Injection CVE-2024-30497 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Authenticated (Subscriber+) SQL Injection CVE-2024-0608 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H March 28, 2024
OSS Aliyun <= 1.4.10 - Authenticated (Administrator+) SQL Injection CVE-2024-30494 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H March 28, 2024
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection CVE-2024-30491 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WordPress Announcement & Notification Banner Plugin – Bulletin <= 3.8.5 - Authenticated (Administrator+) SQL Injection CVE-2024-30478 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 28, 2024
WP Travel Engine <= 5.7.9 - Unauthenticated SQL Injection CVE-2024-30502 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection CVE-2024-0913 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 28, 2024
WP ERP <= 1.12.9 - Authenticated (AccountingManager+) SQL Injection CVE-2024-0956 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H March 28, 2024
ProfileGrid <= 5.7.8 - Unauthenticated SQL Injection CVE-2024-30490 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection CVE-2024-30489 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
Media Library Folders <= 8.1.7 - Authenticated (Author+) SQL Injection CVE-2024-30486 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
Zotpress <= 7.3.7 - Authenticated (Contributor+) SQL Injection CVE-2024-30488 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation