Vulnerabilities protected by our SQL Injection firewall rule

6,581,771
Attacks Blocked in Past 24 Hours

Showing 1-20 of 1,326 Vulnerabilities

FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection
10.0
CVE-2024-38773
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
UiPress lite <= 3.4.06 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-38788
Jul 19, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection
8.5
CVE-2024-38708
Jul 11, 2024
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-38755
Jul 11, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
8.8
CVE-2024-6666
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Spiffy Calendar <= 4.9.11 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-38692
Jul 10, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
10.0
CVE-2024-37933
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
9.9
CVE-2024-37564
Jul 9, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-37494
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection
9.1
CVE-2024-37486
Jul 4, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
9.8
CVE-2024-6172
Jul 1, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
PayPlus Payment Gateway <= 6.6.8 - Unauthenticated SQL Injection
10.0
CVE-2024-6205
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
8.8
CVE-2024-2386
Jun 28, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Zoho Marketing Automation <= 1.2.7 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-37225
Jun 21, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
9.8
CVE-2024-5756
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
10.0
CVE-2024-37112
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-37090
Jun 20, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection
9.8
CVE-2024-4742
Jun 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
10.0
CVE-2024-3605
Jun 19, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection
10.0
CVE-2024-3922
Jun 11, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Title CVE ID CVSS Vector Date
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection CVE-2024-38773 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 19, 2024
UiPress lite <= 3.4.06 - Authenticated (Administrator+) SQL Injection CVE-2024-38788 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H July 19, 2024
Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection CVE-2024-38708 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H July 11, 2024
DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection CVE-2024-38755 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H July 11, 2024
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id CVE-2024-6666 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H July 10, 2024
Spiffy Calendar <= 4.9.11 - Authenticated (Administrator+) SQL Injection CVE-2024-38692 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H July 10, 2024
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection CVE-2024-37933 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H July 9, 2024
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection CVE-2024-37564 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H July 9, 2024
Youzify <= 1.2.5 - Authenticated (Contributor+) SQL Injection CVE-2024-37494 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H July 4, 2024
Paid Memberships Pro <= 3.0.5 - Authenticated (Administrator+) SQL Injection CVE-2024-37486 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H July 4, 2024
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe CVE-2024-6172 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H July 1, 2024
PayPlus Payment Gateway <= 6.6.8 - Unauthenticated SQL Injection CVE-2024-6205 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H June 28, 2024
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection CVE-2024-2386 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 28, 2024
Zoho Marketing Automation <= 1.2.7 - Authenticated (Contributor+) SQL Injection CVE-2024-37225 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H June 21, 2024
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin CVE-2024-5756 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 20, 2024
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution CVE-2024-37112 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H June 20, 2024
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) SQL Injection CVE-2024-37090 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H June 20, 2024
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.2.5 - Authenticated (Contributor+) SQL Injection CVE-2024-4742 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H June 19, 2024
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection CVE-2024-3605 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H June 19, 2024
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection CVE-2024-3922 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H June 11, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation