WordPress 漏洞研究

受保护的漏洞。

检查每个建议和 BitFire 控制(机器人防护、WAF 或运行时 RASP)背后的攻击,以防止其成为威胁。

已验证的客户端机器人控制 基于行为的WAF 运行时 RASP 实施
咨询图书馆

BitFire 如何阻止已知漏洞

Showing 25–30 of 44 records · Updated September 29, 2026

Critical
CVE-2026-UNASSIGNED-CLICK2SHELL

WordPress Click2Shell

CVSS9.3

After 1,155 days of 0-day protection for every critical vulnerability - BitFire did not stop Click2Shell at disclosure. Learn why, what we deployed on September 20, and how PRO RASP protection will expand.

受影响的站点
Not disclosed
攻击等级
Selector Injection And Cross-site Request Forgery
BitFire 保护WAF mitigation deployed; PRO RASP hardening in evaluation
阅读技术分析
High
CVE-2026-94504

Ninja Forms

CVSS7.2

BitFire's WAF blocks the stored-script payload before Ninja Forms saves it, Bot Protection stops automated submissions, and PRO RASP contains admin fallout.

受影响的站点
500,000+
攻击等级
Stored Cross-site Scripting
BitFire 保护Protected by BitFire Bot Protection + WAF + PRO RASP
阅读技术分析
Critical
CVE-2026-92229

Forminator Forms

CVSS9.1

BitFire blocks automated Forminator exploit delivery, while PRO RASP stops privileged actions invoked through malicious shortcodes.

受影响的站点
600,000+
攻击等级
Arbitrary Shortcode Execution
BitFire 保护Protected by BitFire Bot Protection + PRO RASP
阅读技术分析
Critical
CVE-2026-9055

Amelia Premium

CVSS9.8

BitFire blocks automated Amelia endpoint abuse, while PRO RASP prevents unauthorized role changes and administrator password takeover.

受影响的站点
<80,000
攻击等级
Privilege Escalation
BitFire 保护Protected by BitFire Bot Protection + PRO RASP
阅读技术分析
Critical
CVE-2026-78159

The Events Calendar

CVSS9.8

BitFire blocks automated Events Calendar exploit delivery, while PRO RASP prevents unauthorized PHP files and administrator persistence.

受影响的站点
600,000
攻击等级
Callable Injection
BitFire 保护Protected by BitFire Bot Protection + PRO RASP
阅读技术分析
Critical
CVE-2026-12793

JetFormBuilder

CVSS9.8

BitFire blocks automated JetFormBuilder exploit delivery, while PRO RASP prevents unauthorized administrator account creation.

受影响的站点
80,000
攻击等级
Improper Authorization
BitFire 保护Protected by BitFire Bot Protection + PRO RASP
阅读技术分析

第 5 页,共 8 页

保护您的 WordPress 网站

停止操作,而不仅仅是签名。

BitFire 结合了机器人控制、请求检查和运行时执行,因此新出现的漏洞会在特定于 CVE 的规则存在之前失败。

免费保护我的网站 →