Vulnerabilities protected by our SQL Injection firewall rule

1,268,658
Attacks Blocked in Past 24 Hours

Showing 61-80 of 1,271 Vulnerabilities

Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
9.8
CVE-2023-40609
Aug 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
9.8
CVE ID Unknown
Jul 31, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
9.8
CVE-2023-32590
Jul 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Donate <= 1.4 - SQL Injection
9.8
CVE-2015-10122
Jul 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php
9.8
CVE-2015-10122
Jul 16, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection
9.8
CVE-2023-36525
Jun 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MStore API <= 4.0.1 - Unauthenticated SQL Injection
9.8
CVE-2023-3197
Jun 23, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MStore API <= 3.9.7 - Unauthenticated SQL Injection
9.8
CVE-2022-47614
Jun 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MStore API <= 3.9.7 - Unauthenticated SQL Injection
9.8
CVE-2023-3077
Jun 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection
9.8
CVE-2023-25700
May 30, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id
9.8
CVE-2022-47586
May 9, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
9.8
CVE-2023-2032
Apr 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
Apr 25, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
9.8
CVE-2023-0600
Apr 24, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
9.8
CVE-2022-46818
Apr 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
9.8
CVE-2022-4118
Apr 17, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Houzez <= 2.8.2 - Unauthenticated SQL Injection
9.8
CVE-2023-29432
Apr 6, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
9.8
CVE-2023-1020
Apr 3, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
9.8
CVE-2023-28662
Mar 29, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ARMember <= 3.4.11 - Unauthenticated SQL Injection
9.8
CVE-2022-46808
Mar 27, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post' CVE-2023-40609 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H August 17, 2023
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 31, 2023
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection CVE-2023-32590 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 20, 2023
WP Donate <= 1.4 - SQL Injection CVE-2015-10122 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 18, 2023
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php CVE-2015-10122 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 16, 2023
WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection CVE-2023-36525 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 27, 2023
MStore API <= 4.0.1 - Unauthenticated SQL Injection CVE-2023-3197 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 23, 2023
MStore API <= 3.9.7 - Unauthenticated SQL Injection CVE-2022-47614 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 19, 2023
MStore API <= 3.9.7 - Unauthenticated SQL Injection CVE-2023-3077 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 19, 2023
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection CVE-2023-25700 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 30, 2023
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id CVE-2022-47586 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H May 9, 2023
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's' CVE-2023-2032 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2023
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 25, 2023
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection CVE-2023-0600 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 24, 2023
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection CVE-2022-46818 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 19, 2023
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection CVE-2022-4118 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 17, 2023
Houzez <= 2.8.2 - Unauthenticated SQL Injection CVE-2023-29432 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 6, 2023
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection CVE-2023-1020 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H April 3, 2023
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection CVE-2023-28662 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 29, 2023
ARMember <= 3.4.11 - Unauthenticated SQL Injection CVE-2022-46808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation