Vulnerabilities protected by our SQL Injection firewall rule

1,349,810
Attacks Blocked in Past 24 Hours

Showing 101-120 of 1,290 Vulnerabilities

WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
7.2
CVE-2023-48327
Nov 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection
7.2
CVE ID Unknown
Nov 21, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
7.2
CVE-2023-5674
Nov 20, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-5108
Nov 13, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-38519
Nov 9, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-47530
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-47558
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
7.2
CVE-2023-47506
Nov 7, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-47236
Nov 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-46821
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-46823
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection
7.2
CVE ID Unknown
Oct 29, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
404 Solution <= 2.33.2 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE ID Unknown
Oct 23, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-2841
Oct 21, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
7.2
CVE ID Unknown
Oct 18, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection
7.2
CVE ID Unknown
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Seriously Simple Stats <= 1.5.0 - Authenticated (Podcast manager+) SQL Injection via order_by
7.2
CVE-2023-45001
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-45046
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2023-45069
Oct 3, 2023
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates CVE-2023-48327 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 23, 2023
Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 21, 2023
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id CVE-2023-5674 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 20, 2023
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection CVE-2023-5108 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 13, 2023
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection CVE-2023-38519 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 9, 2023
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection CVE-2023-47530 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 7, 2023
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection CVE-2023-47558 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 7, 2023
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection CVE-2023-47506 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 7, 2023
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection CVE-2023-47236 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H November 3, 2023
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection CVE-2023-46821 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection CVE-2023-46823 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 29, 2023
404 Solution <= 2.33.2 - Authenticated (Administrator+) SQL Injection via orderby 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 23, 2023
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection CVE-2023-2841 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 21, 2023
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 18, 2023
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Seriously Simple Stats <= 1.5.0 - Authenticated (Podcast manager+) SQL Injection via order_by CVE-2023-45001 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection CVE-2023-45046 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection CVE-2023-45069 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H October 3, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation