Vulnerabilities protected by our SQL Injection firewall rule

3,071,116
Attacks Blocked in Past 24 Hours

Showing 921-940 of 1,281 Vulnerabilities

Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-47530
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
7.2
CVE-2023-47506
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-47236
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-46821
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-46823
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
404 Solution <= 2.33.2 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE ID Unknown
Oct 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2841
Oct 21, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE ID Unknown
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection
7.2
CVE ID Unknown
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Seriously Simple Stats <= 1.5.0 - Authenticated (Podcast manager+) SQL Injection via order_by
7.2
CVE-2023-45001
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-45069
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-45046
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WPSchoolPress <= 2.2.4 - Authenticated(Teacher+) SQL Injection via ClassID
7.2
CVE-2023-4776
Sep 25, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection
7.2
CVE ID Unknown
Sep 22, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection
7.2
CVE ID Unknown
Sep 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WooCommerce Beta Tester < 2.2.4 - Authenticated (Administrator+) SQL Injection
7.2
CVE ID Unknown
Sep 12, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'
7.2
CVE-2023-41685
Sep 4, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Donations Made Easy – Smart Donations <= 4.0.12 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-40207
Aug 11, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection CVE-2023-47530 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 7, 2023
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection CVE-2023-47506 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 7, 2023
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection CVE-2023-47236 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 3, 2023
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection CVE-2023-46821 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection CVE-2023-46823 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
404 Solution <= 2.33.2 - Authenticated (Administrator+) SQL Injection via orderby 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 23, 2023
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection CVE-2023-2841 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 21, 2023
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 18, 2023
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Seriously Simple Stats <= 1.5.0 - Authenticated (Podcast manager+) SQL Injection via order_by CVE-2023-45001 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection CVE-2023-45069 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection CVE-2023-45046 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
WPSchoolPress <= 2.2.4 - Authenticated(Teacher+) SQL Injection via ClassID CVE-2023-4776 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 25, 2023
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 22, 2023
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 12, 2023
WooCommerce Beta Tester < 2.2.4 - Authenticated (Administrator+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 12, 2023
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby' CVE-2023-41685 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H September 4, 2023
Donations Made Easy – Smart Donations <= 4.0.12 - Authenticated (Administrator+) SQL Injection CVE-2023-40207 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H August 11, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation