Vulnerabilities protected by our SQL Injection firewall rule

2,434,604
Attacks Blocked in Past 24 Hours

Showing 1-20 of 1,436 Vulnerabilities

Title CVE ID CVSS Vector Date
LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' CVE-2024-8522 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H September 11, 2024
Super Store Finder <= 6.9.7 - Unauthenticated SQL Injection CVE-2024-43978 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 28, 2024
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection CVE-2024-43965 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 26, 2024
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection CVE-2024-43941 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 26, 2024
WBW Product Table Pro <= 1.9.4 - Unauthenticated Arbitrary SQL Execution CVE-2024-43918 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 22, 2024
Woo Inquiry <= 0.1 - Unauthenticated SQL Injection CVE-2024-7854 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 20, 2024
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection CVE-2024-6924 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 10, 2024
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection CVE-2024-6928 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 10, 2024
Viral Signup <= 2.1 - Unauthenticated SQL Injection CVE-2024-6926 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 7, 2024
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection CVE-2024-43144 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 7, 2024
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection CVE-2024-43132 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 7, 2024
Easy Digital Downloads <= 3.2.12 - Unauthenticated SQL Injection CVE-2024-5057 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 1, 2024
VikRentCar <= 1.4.0 - Unauthenticated SQL Injection CVE-2024-39653 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H August 1, 2024
Chatbot with ChatGPT <= 2.4.4 - Unauthenticated SQL Injection CVE-2024-6847 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 29, 2024
ListingPro Plugin <= 2.9.3 - Unauthenticated SQL Injection CVE-2024-38795 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 22, 2024
ListingPro <= 2.9.3 - Unauthenticated SQL Injection CVE-2024-39622 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 22, 2024
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection CVE-2024-38773 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 19, 2024
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection CVE-2024-5975 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 9, 2024
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection CVE-2024-37933 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 9, 2024
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Unauthenticated SQL Injection CVE-2024-5765 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 9, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation