Vulnerabilities protected by our SQL Injection firewall rule

1,500,315
Attacks Blocked in Past 24 Hours

Showing 1241-1260 of 1,290 Vulnerabilities

Yellow Swordfish Simple Forum <= 1.11 - SQL Injection
9.8
CVE-2008-7040
Feb 16, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ShiftThis (Unspecified Version) - SQL Injection
9.8
CVE-2008-0683
Feb 3, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordSpew <= 3.71 - SQL Injection
9.8
CVE-2008-0682
Feb 2, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AdServe < 0.3 - SQL Injection
9.8
CVE-2008-0507
Jan 30, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WassUp Real Time Analytics 1.4 - 1.4.3 - SQL Injection
9.8
CVE-2008-0520
Jan 30, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP-Cal <= 0.3 - SQL Injection
9.8
CVE-2008-0490
Jan 27, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP-Forum <= 1.7.4 - Remote SQL Injection
9.8
CVE-2008-0388
Jan 19, 2008
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Core < 2.2.3 & WordPress MU < 1.2.5a - SQL Injection
9.8
CVE-2007-4894
Sep 8, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Core < 2.3.2 - SQL Injection
9.8
CVE-2007-6318
Sep 8, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The Hacker's Diet <= 0.9.6b - SQL Injection
9.8
CVE-2007-10003
Apr 30, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.0.5 - SQL Injection
9.8
CVE-2007-0107
Jan 5, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) <= 3.8.2 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-34412
May 6, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-3342
Apr 26, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-33546
Apr 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-32710
Apr 22, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
BA Book Everything <= 1.6.4 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-32125
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Find Duplicates <= 1.4.6 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-32127
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-32137
Apr 12, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-31370
Apr 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Slideshow Gallery <= 1.7.8 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-31355
Apr 7, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Yellow Swordfish Simple Forum <= 1.11 - SQL Injection CVE-2008-7040 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 16, 2008
ShiftThis (Unspecified Version) - SQL Injection CVE-2008-0683 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 3, 2008
WordSpew <= 3.71 - SQL Injection CVE-2008-0682 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 2, 2008
AdServe < 0.3 - SQL Injection CVE-2008-0507 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 30, 2008
WassUp Real Time Analytics 1.4 - 1.4.3 - SQL Injection CVE-2008-0520 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 30, 2008
WP-Cal <= 0.3 - SQL Injection CVE-2008-0490 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 27, 2008
WP-Forum <= 1.7.4 - Remote SQL Injection CVE-2008-0388 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2008
WordPress Core < 2.2.3 & WordPress MU < 1.2.5a - SQL Injection CVE-2007-4894 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 8, 2007
WordPress Core < 2.3.2 - SQL Injection CVE-2007-6318 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H September 8, 2007
The Hacker's Diet <= 0.9.6b - SQL Injection CVE-2007-10003 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 30, 2007
WordPress Core <= 2.0.5 - SQL Injection CVE-2007-0107 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 5, 2007
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) <= 3.8.2 - Authenticated (Subscriber+) SQL Injection CVE-2024-34412 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H May 6, 2024
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection CVE-2024-3342 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 26, 2024
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection CVE-2024-33546 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 25, 2024
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection CVE-2024-32710 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 22, 2024
BA Book Everything <= 1.6.4 - Authenticated (Contributor+) SQL Injection CVE-2024-32125 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 12, 2024
Find Duplicates <= 1.4.6 - Authenticated (Subscriber+) SQL Injection CVE-2024-32127 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 12, 2024
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-32137 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 12, 2024
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection CVE-2024-31370 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 9, 2024
Slideshow Gallery <= 1.7.8 - Authenticated (Contributor+) SQL Injection CVE-2024-31355 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 7, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation