Vulnerabilities protected by our SQL Injection firewall rule

2,641,586
Attacks Blocked in Past 24 Hours

Showing 921-940 of 1,291 Vulnerabilities

MainWP Google Analytics Extension <= 4.0.4 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-23651
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Simple URLs <= 114 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0098
Jan 17, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
9.8
CVE-2023-23737
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-23660
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
9.8
CVE-2023-0224
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP-TopBar <= 5.36 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-23824
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mapwiz <= 1.0.1 - Authenticated (Admin+) SQL Injection
7.2
CVE-2022-4546
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Booking Calendar <= 9.4.2 - Authenticated (Admin+) SQL Injection
6.6
CVE-2023-23991
Jan 20, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
9.8
CVE-2022-45808
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
9.8
CVE-2022-4445
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
RapidLoad Power-Up for Autoptimize <= 1.6.35 - Authenticated (Subscriber+) SQL Injection
7.2
CVE-2022-47593
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Yelp Review Slider <= 7.0 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0263
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WP Airbnb Review Slider <= 3.2 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0262
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WP Review Slider <= 12.1 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0260
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0220
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WP TripAdvisor Review Slider <= 10.7 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0261
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WP Google Review Slider <= 11.7 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-0259
Jan 23, 2023
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection
6.6
CVE-2023-1016
Jan 25, 2023
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection
8.6
CVE-2022-47151
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection
9.1
CVE-2022-47588
Jan 27, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
MainWP Google Analytics Extension <= 4.0.4 - Authenticated (Subscriber+) SQL Injection CVE-2023-23651 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 17, 2023
Simple URLs <= 114 - Authenticated (Subscriber+) SQL Injection CVE-2023-0098 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 17, 2023
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection CVE-2023-23737 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2023
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection CVE-2023-23660 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 18, 2023
GiveWP <= 2.23.2 - Unauthenticated SQL Injection CVE-2023-0224 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2023
WP-TopBar <= 5.36 - Authenticated (Administrator+) SQL Injection CVE-2023-23824 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 19, 2023
Mapwiz <= 1.0.1 - Authenticated (Admin+) SQL Injection CVE-2022-4546 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 19, 2023
Booking Calendar <= 9.4.2 - Authenticated (Admin+) SQL Injection CVE-2023-23991 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H January 20, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection CVE-2022-45808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection CVE-2022-4445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
RapidLoad Power-Up for Autoptimize <= 1.6.35 - Authenticated (Subscriber+) SQL Injection CVE-2022-47593 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H January 20, 2023
WP Yelp Review Slider <= 7.0 - Authenticated (Subscriber+) SQL Injection CVE-2023-0263 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
WP Airbnb Review Slider <= 3.2 - Authenticated (Subscriber+) SQL Injection CVE-2023-0262 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
WP Review Slider <= 12.1 - Authenticated (Subscriber+) SQL Injection CVE-2023-0260 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Subscriber+) SQL Injection CVE-2023-0220 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
WP TripAdvisor Review Slider <= 10.7 - Authenticated (Subscriber+) SQL Injection CVE-2023-0261 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
WP Google Review Slider <= 11.7 - Authenticated (Subscriber+) SQL Injection CVE-2023-0259 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H January 23, 2023
Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection CVE-2023-1016 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H January 25, 2023
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection CVE-2022-47151 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N January 27, 2023
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection CVE-2022-47588 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H January 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation