Vulnerabilities protected by our SQL Injection firewall rule

2,163,842
Attacks Blocked in Past 24 Hours

Showing 81-100 of 1,281 Vulnerabilities

Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
9.8
CVE-2022-46818
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
9.8
CVE-2022-4118
Apr 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Houzez <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2023-29432
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
9.8
CVE-2023-1020
Apr 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
9.8
CVE-2023-28662
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ARMember <= 3.4.11 - Unauthenticated SQL Injection
9.8
CVE-2022-46808
Mar 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
9.8
CVE-2022-47445
Mar 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
9.8
CVE-2023-0037
Feb 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
9.8
CVE-2023-24000
Feb 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
9.8
CVE-2022-4445
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
9.8
CVE-2022-45808
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
9.8
CVE-2023-0224
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
9.8
CVE-2023-23737
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
9.8
CVE-2023-23488
Jan 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Easy Digital Downloads < 3.1.0.4 - SQL Injection
9.8
CVE-2023-23489
Jan 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hide My WP < 6.2.9 - Unauthenticated SQL Injection
9.8
CVE-2022-4681
Jan 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
Jan 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection
9.8
CVE-2022-4383
Dec 27, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fontsy <= 1.8.6 - Unauthenticated SQL Injection
9.8
CVE-2022-4447
Dec 21, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection
9.8
CVE-2022-45355
Dec 20, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection CVE-2022-46818 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 19, 2023
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection CVE-2022-4118 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 17, 2023
Houzez <= 2.8.2 - Unauthenticated SQL Injection CVE-2023-29432 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection CVE-2023-1020 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 3, 2023
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection CVE-2023-28662 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 29, 2023
ARMember <= 3.4.11 - Unauthenticated SQL Injection CVE-2022-46808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 27, 2023
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection CVE-2022-47445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 15, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters CVE-2023-0037 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 20, 2023
GamiPress <= 2.5.7 - Unauthenticated SQL Injection CVE-2023-24000 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2023
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection CVE-2022-4445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection CVE-2022-45808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
GiveWP <= 2.23.2 - Unauthenticated SQL Injection CVE-2023-0224 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2023
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection CVE-2023-23737 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2023
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection CVE-2023-23488 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 12, 2023
Easy Digital Downloads < 3.1.0.4 - SQL Injection CVE-2023-23489 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 12, 2023
Hide My WP < 6.2.9 - Unauthenticated SQL Injection CVE-2022-4681 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 11, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 11, 2023
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection CVE-2022-4383 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2022
Fontsy <= 1.8.6 - Unauthenticated SQL Injection CVE-2022-4447 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 21, 2022
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection CVE-2022-45355 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 20, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation