Protected vulnerabilities.

BitFire's WAF detects and blocks the unauthenticated stored DOM-based XSS payload in HT Contact Form ≤ 2.10.1 before WordPress processes the request.

Affected sites

10,000+

Attack class

Stored Dom-based Cross-site Scripting

BitFire FREE blocks the double-encoded traversal local file inclusion before vulnerable WordPress template resolution can include an attacker-selected PHP file.

Affected sites

+100,000,000

Attack class

Path Traversal And Local File Inclusion

BitFire FREE detects the serialized PHP object behind CVE-2026-82222 before GiveWP can deserialize it and trigger remote code execution.

Affected sites

100,000+

Attack class

Php Object Injection

BitFire blocks malicious uploads and PRO RASP prevents unauthorized PHAR creation through the vulnerable Contact Form 7 add-on.

Affected sites

60,000

Attack class

Unrestricted File Upload

BitFire PRO RASP blocks unauthorized PHP-file writes that turn the Avada and Fusion Builder flaw into persistent server compromise.

Affected sites

700,000+

Attack class

Arbitrary File Write

ManageWP Worker authentication bypass can log attackers in as other users, while BitFire PRO RASP blocks unauthorized session creation.

Affected sites

1,000,900+

Attack class

Authentication Bypass