WordPress 漏洞研究

受保护的漏洞。

检查每个建议和 BitFire 控制(机器人防护、WAF 或运行时 RASP)背后的攻击,以防止其成为威胁。

已验证的客户端机器人控制 基于行为的WAF 运行时 RASP 实施
咨询图书馆

BitFire 如何阻止已知漏洞

Showing 37–42 of 44 records · Updated September 29, 2026

Critical
CVE-2026-5524

Divi Form Builder

CVSS9.8

BitFire blocks automated CVE-2026-5524 upload requests and uses PRO RASP to prevent Divi Form Builder from creating unauthorized executable PHP files.

受影响的站点
2,600,000
攻击等级
Arbitrary File Upload
BitFire 保护Protected by BitFire RASP
阅读技术分析
Critical
CVE-2026-15158

Blocksy Companion Pro

CVSS9.8

BitFire blocks automated exploit requests and uses PRO RASP to prevent CVE-2026-15158 from creating an unauthorized PHP file through Blocksy Companion Pro.

受影响的站点
300,000+
攻击等级
Arbitrary File Upload
BitFire 保护Protected by RASP
阅读技术分析
High
CVE-2026-10795

UpdraftPlus

CVSS8.1

BitFire blocks automated forged UpdraftPlus RPC requests and uses PRO RASP to prevent a malicious plugin ZIP from creating unauthorized PHP files.

受影响的站点
3,000,000+
攻击等级
Authentication Bypass
BitFire 保护Protected by BitFire Bot Protection + RASP
阅读技术分析
Critical
CVE-2025-11749

AI Engine MCP

CVSS9.8

AI Engine exposes its MCP bearer token in public REST API discovery data, while BitFire PRO RASP prevents an MCP request authenticated only by that plugin token from creating a new administrator account.

受影响的站点
100,000+
攻击等级
Sensitive Information Exposure
BitFire 保护Protected by BitFire RASP
阅读技术分析
Critical
CVE-2025-7340

HT Contact Form Widget

CVSS9.8

BitFire blocks CVE-2025-7340 with bot protection, WAF upload controls, and operating-system-level RASP protection against unauthorized PHP file changes.

受影响的站点
10,000+
攻击等级
Arbitrary File Upload
BitFire 保护Protected by BitFire Bot Protection + WAF + RASP
阅读技术分析
Critical
CVE-2024-28890

Forminator

CVSS9.8

Forminator accepted files without confirming that their contents matched their apparent type, while BitFire blocks unknown exploit bots and uses PRO RASP to prevent unauthorized PHP file creation.

受影响的站点
600,000+
攻击等级
Arbitrary File Upload
BitFire 保护Protected by BitFire Bot Protection + RASP
阅读技术分析

第 7 页,共 8 页

保护您的 WordPress 网站

停止操作,而不仅仅是签名。

BitFire 结合了机器人控制、请求检查和运行时执行,因此新出现的漏洞会在特定于 CVE 的规则存在之前失败。

免费保护我的网站 →