Protected vulnerabilities.

BitFire stops CVE-2026-1490 twice: FREE Bot Protection blocks the scripted exploit delivery and BitFire PRO RASP blocks the unauthorized plugin install.

Affected sites

200000

Attack class

Authorization Bypass Via Ptr Spoofing

BitFire FREE Bot Protection stops the authenticated profile-form exploit behind WP User Manager CVE-2025-13320 before it can delete server files.

Affected sites

10000

Attack class

Arbitrary File Deletion

BitFire PRO RASP blocks CVE-2024-10542, an unauthenticated plugin-installation flaw in CleanTalk Anti-Spam, at runtime. Update to 6.44 and investigate.

Affected sites

200000

Attack class

Authorization Bypass

BitFire FREE Bot Protection and BitFire PRO RASP block the missing-authorization AJAX attacks in CleanTalk Anti-Spam before they damage your site.

Affected sites

200000

Attack class

Missing Authorization

BitFire Bot Protection blocks the forged reset form POST and BitFire PRO RASP stops the administrator impersonation behind CVE-2021-24655.

Affected sites

10000

Attack class

Broken Access Control

BitFire's FREE WAF detects and blocks the unauthenticated SQL injection behind CVE-2021-24295 before the vulnerable CleanTalk code ever runs.

Affected sites

200000

Attack class

Time-based Blind Sql Injection