Vulnerabilities protected by our SQL Injection firewall rule

1,543,589
Attacks Blocked in Past 24 Hours

Showing 1-20 of 1,221 Vulnerabilities

Title CVE ID CVSS Vector Date
Viral Quiz Maker - OnionBuzz < 1.2.2 - SQL Injection CVE-2019-14231 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 20, 2019
Simple Ads Manager < 2.7.97 - Multiple SQL Injections CVE-2015-2824 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H April 2, 2015
All-in-One Events Calendar < 1.10 - SQL Injection 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H March 7, 2013
FireStats <1.6.2 - SQL Injection CVE-2009-2144 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H June 22, 2009
Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection CVE-2022-1182 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 19, 2022
WP Symposium < 14.11 - Authenticated SQL Injection CVE-2014-8810 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H November 26, 2014
BSK PDF Manager <= 1.4 - Authenticated SQL Injection CVE-2014-4944 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H August 1, 2014
Network Summary <= 2.0.11 - Unauthenticated SQL Injection CVE-2024-2804 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 21, 2024
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CVE-2024-1711 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 19, 2024
Automatic <= 3.92.0 - Unauthenticated SQL Injection CVE-2024-27956 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection CVE-2024-1981 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 28, 2024
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection CVE-2024-1698 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 26, 2024
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVE-2024-1512 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 16, 2024
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection CVE-2024-0610 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 16, 2024
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection CVE-2024-25928 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 15, 2024
MoveTo <= 6.2 - Unauthenticated SQL Injection CVE-2024-25910 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 12, 2024
Booking Calendar <= 9.9 - Unauthenticated SQL Injection CVE-2024-1207 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 7, 2024
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection CVE-2024-0709 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2024
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection CVE-2024-0705 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2024
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken CVE-2023-52215 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 8, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation