Vulnerabilities protected by our SQL Injection firewall rule

1,167,303
Attacks Blocked in Past 24 Hours

Showing 81-100 of 1,271 Vulnerabilities

Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
9.8
CVE-2022-47445
Mar 15, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
9.8
CVE-2023-0037
Feb 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
9.8
CVE-2023-24000
Feb 14, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
9.8
CVE-2022-4445
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
9.8
CVE-2022-45808
Jan 20, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
9.8
CVE-2023-0224
Jan 19, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
9.8
CVE-2023-23737
Jan 18, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
9.8
CVE-2023-23488
Jan 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Easy Digital Downloads < 3.1.0.4 - SQL Injection
9.8
CVE-2023-23489
Jan 12, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hide My WP < 6.2.9 - Unauthenticated SQL Injection
9.8
CVE-2022-4681
Jan 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection
9.8
CVE ID Unknown
Jan 11, 2023
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection
9.8
CVE-2022-4383
Dec 27, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fontsy <= 1.8.6 - Unauthenticated SQL Injection
9.8
CVE-2022-4447
Dec 21, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection
9.8
CVE-2022-45355
Dec 20, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Cryptocurrency Widgets Pack <= 1.8.1 - Unauthenticated SQL Injection
9.8
CVE-2022-44588
Dec 13, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
LetsRecover <= 1.1.0 - Unauthenticated SQL Injection via AJAX action
9.8
CVE-2022-4357
Dec 12, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Cryptocurrency Widgets Pack <= 2.0 - Unauthenticated SQL Injection
9.8
CVE-2022-4059
Dec 9, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP User <= 7.0 - Unauthenticated SQL Injection
9.8
CVE-2022-4049
Dec 9, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
9.8
CVE-2022-4099
Dec 8, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Build App Online <= 1.0.18 - Unauthenticated SQL Injection
9.8
CVE-2022-3241
Dec 6, 2022
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection CVE-2022-47445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 15, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters CVE-2023-0037 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 20, 2023
GamiPress <= 2.5.7 - Unauthenticated SQL Injection CVE-2023-24000 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H February 14, 2023
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection CVE-2022-4445 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection CVE-2022-45808 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 20, 2023
GiveWP <= 2.23.2 - Unauthenticated SQL Injection CVE-2023-0224 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 19, 2023
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection CVE-2023-23737 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 18, 2023
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection CVE-2023-23488 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 12, 2023
Easy Digital Downloads < 3.1.0.4 - SQL Injection CVE-2023-23489 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 12, 2023
Hide My WP < 6.2.9 - Unauthenticated SQL Injection CVE-2022-4681 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 11, 2023
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H January 11, 2023
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection CVE-2022-4383 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 27, 2022
Fontsy <= 1.8.6 - Unauthenticated SQL Injection CVE-2022-4447 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 21, 2022
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection CVE-2022-45355 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 20, 2022
Cryptocurrency Widgets Pack <= 1.8.1 - Unauthenticated SQL Injection CVE-2022-44588 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 13, 2022
LetsRecover <= 1.1.0 - Unauthenticated SQL Injection via AJAX action CVE-2022-4357 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 12, 2022
Cryptocurrency Widgets Pack <= 2.0 - Unauthenticated SQL Injection CVE-2022-4059 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 9, 2022
WP User <= 7.0 - Unauthenticated SQL Injection CVE-2022-4049 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 9, 2022
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection CVE-2022-4099 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 8, 2022
Build App Online <= 1.0.18 - Unauthenticated SQL Injection CVE-2022-3241 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H December 6, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation