Vulnerabilities protected by our SQL Injection firewall rule

1,276,924
Attacks Blocked in Past 24 Hours

Showing 21-40 of 1,271 Vulnerabilities

WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30497
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-30491
Mar 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WordPress Tooltips <= 9.4.3 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30243
Mar 26, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-30239
Mar 26, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-0399
Mar 25, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2022-1182
Apr 19, 2022
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WP Symposium < 14.11 - Authenticated SQL Injection
9.9
CVE-2014-8810
Nov 26, 2014
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
BSK PDF Manager <= 1.4 - Authenticated SQL Injection
9.9
CVE-2014-4944
Aug 1, 2014
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
9.8
CVE-2024-2876
Apr 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection
9.8
CVE-2024-2879
Apr 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network Summary <= 2.0.11 - Unauthenticated SQL Injection
9.8
CVE-2024-2804
Mar 21, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'
9.8
CVE-2024-1711
Mar 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Automatic <= 3.92.0 - Unauthenticated SQL Injection
9.8
CVE-2024-27956
Mar 13, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection
9.8
CVE-2024-1981
Feb 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2024-1698
Feb 26, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
9.8
CVE-2024-0610
Feb 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
9.8
CVE-2024-1512
Feb 16, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection
9.8
CVE-2024-25928
Feb 15, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MoveTo <= 6.2 - Unauthenticated SQL Injection
9.8
CVE-2024-25910
Feb 12, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
9.8
CVE-2024-1207
Feb 7, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) SQL Injection CVE-2024-30497 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection CVE-2024-30491 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 28, 2024
WordPress Tooltips <= 9.4.3 - Authenticated (Contributor+) SQL Injection CVE-2024-30243 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 26, 2024
Zoho Campaigns <= 2.0.6 - Authenticated (Contributor+) SQL Injection CVE-2024-30239 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 26, 2024
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection CVE-2024-0399 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H March 25, 2024
Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection CVE-2022-1182 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H April 19, 2022
WP Symposium < 14.11 - Authenticated SQL Injection CVE-2014-8810 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H November 26, 2014
BSK PDF Manager <= 1.4 - Authenticated SQL Injection CVE-2014-4944 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H August 1, 2014
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection CVE-2024-2876 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 15, 2024
LayerSlider 7.9.11 - 7.10.0 - Unauthenticated SQL Injection CVE-2024-2879 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 2, 2024
Network Summary <= 2.0.11 - Unauthenticated SQL Injection CVE-2024-2804 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 21, 2024
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CVE-2024-1711 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 19, 2024
Automatic <= 3.92.0 - Unauthenticated SQL Injection CVE-2024-27956 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 13, 2024
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection CVE-2024-1981 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 28, 2024
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection CVE-2024-1698 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 26, 2024
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection CVE-2024-0610 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 16, 2024
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection CVE-2024-1512 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 16, 2024
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection CVE-2024-25928 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 15, 2024
MoveTo <= 6.2 - Unauthenticated SQL Injection CVE-2024-25910 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 12, 2024
Booking Calendar <= 9.9 - Unauthenticated SQL Injection CVE-2024-1207 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 7, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation