Vulnerabilities protected by our SQL Injection firewall rule

2,595,826
Attacks Blocked in Past 24 Hours

Showing 81-100 of 1,294 Vulnerabilities

MStore API <= 3.9.7 - Unauthenticated SQL Injection
9.8
CVE-2023-3077
Jun 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection
9.8
CVE-2023-25700
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id
9.8
CVE-2022-47586
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
9.8
CVE-2023-2032
Apr 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
Apr 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
9.8
CVE-2023-0600
Apr 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
9.8
CVE-2022-46818
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
9.8
CVE-2022-4118
Apr 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Houzez <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2023-29432
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
9.8
CVE-2023-1020
Apr 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
9.8
CVE-2023-28662
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ARMember <= 3.4.11 - Unauthenticated SQL Injection
9.8
CVE-2022-46808
Mar 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
9.8
CVE-2022-47445
Mar 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
9.8
CVE-2023-0037
Feb 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
9.8
CVE-2023-24000
Feb 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
9.8
CVE-2022-45808
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
9.8
CVE-2022-4445
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
9.8
CVE-2023-0224
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
9.8
CVE-2023-23737
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
9.8
CVE-2023-23488
Jan 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
MStore API <= 3.9.7 - Unauthenticated SQL Injection CVE-2023-3077 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 19, 2023
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection CVE-2023-25700 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 30, 2023
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id CVE-2022-47586 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 9, 2023
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's' CVE-2023-2032 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2023
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2023
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection CVE-2023-0600 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 24, 2023
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection CVE-2022-46818 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 19, 2023
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection CVE-2022-4118 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 17, 2023
Houzez <= 2.8.2 - Unauthenticated SQL Injection CVE-2023-29432 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection CVE-2023-1020 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 3, 2023
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection CVE-2023-28662 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 29, 2023
ARMember <= 3.4.11 - Unauthenticated SQL Injection CVE-2022-46808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 27, 2023
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection CVE-2022-47445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 15, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters CVE-2023-0037 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 20, 2023
GamiPress <= 2.5.7 - Unauthenticated SQL Injection CVE-2023-24000 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection CVE-2022-45808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection CVE-2022-4445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
GiveWP <= 2.23.2 - Unauthenticated SQL Injection CVE-2023-0224 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2023
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection CVE-2023-23737 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2023
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection CVE-2023-23488 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 12, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation