Atomicorp WAF Research Notes

Research Update - 2026-07-03

Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.

The entries published in this update represent research notes produced during ongoing analysis activities.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

Presence means a positive research finding was published. Absence means no conclusion should be drawn.

CVE Notes Published in This Update

• CVE-2015-9323 - 404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection - rules observed: 380122
• CVE-2021-42667 - Online Event Booking and Reservation System 2.3.0 - SQL Injection - rules observed: 340016
• CVE-2022-27984 - Cuppa CMS v1.0 - SQL injection - rules observed: 380122
• CVE-2022-27985 - Cuppa CMS v1.0 - SQL injection - rules observed: 340017
• CVE-2022-29013 - Razer Sila Gaming Router - Remote Code Execution - rules observed: 392301
• CVE-2022-36446 - Webmin <1.997 - Authenticated Remote Code Execution - rules observed: 392301
• CVE-2022-44290 - WebTareas 2.4p5 - SQL Injection - rules observed: 380122
• CVE-2022-44291 - WebTareas 2.4p5 - SQL Injection - rules observed: 380122
• CVE-2022-45805 - WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection - rules observed: 380122
• CVE-2023-34751 - bloofoxCMS v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2023-34752 - bloofoxCMS v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2023-34753 - bloofoxCMS v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2023-34754 - Bloofox v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2023-34755 - bloofoxCMS v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2023-34756 - Bloofox v0.5.2.1 - SQL Injection - rules observed: 380122
• CVE-2025-1023 - ChurchCRM - SQL Injection - rules observed: 380122
• CVE-2025-48157 - WordPress Formality Plugin <= 1.5.9 - Local File Inclusion - rules observed: 347009
• CVE-2023-34192 - Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting - rules observed: 341266
• CVE-2019-14530 - OpenEMR <5.0.2 - Local File Inclusion - rules observed: 347009
• CVE-2020-5192 - Hospital Management System 4.0 - SQL Injection - rules observed: 340016
• CVE-2020-5776 - MAGMI - Cross-Site Request Forgery - rules observed: 344364
• CVE-2021-24750 - WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection - rules observed: 340016
• CVE-2021-25052 - WordPress Button Generator <2.3.3 - Remote File Inclusion - rules observed: 340464
• CVE-2022-28080 - Royal Event - SQL Injection - rules observed: 340016
• CVE-2022-3142 - NEX-Forms Plugin < 7.9.7 - SQL Injection - rules observed: 380122
• CVE-2022-3768 - WordPress WPSmartContracts <1.3.12 - SQL Injection - rules observed: 380122
• CVE-2022-46443 - Bangresto - SQL Injection - rules observed: 340016
• CVE-2023-0261 - WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection - rules observed: 380122
• CVE-2023-0630 - Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection - rules observed: 380122
• CVE-2024-35584 - openSIS < 9.1 - SQL Injection - rules observed: 380122
• CVE-2020-35749 - WordPress Simple Job Board <2.9.4 - Local File Inclusion - rules observed: 347009
• CVE-2022-24264 - Cuppa CMS v1.0 - SQL injection - rules observed: 340016
• CVE-2022-24265 - Cuppa CMS v1.0 - SQL injection - rules observed: 380122
• CVE-2022-24266 - Cuppa CMS v1.0 - SQL injection - rules observed: 380122
• CVE-2016-10940 - WordPress zm-gallery plugin 1.0 SQL Injection - rules observed: 340017
• CVE-2021-24145 - WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload - rules observed: 382238
• CVE-2021-24554 - WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection - rules observed: 380122
• CVE-2021-24627 - G Auto-Hyperlink <= 1.0.1 - SQL Injection - rules observed: 340017
• CVE-2021-24786 - Download Monitor < 4.4.5 - SQL Injection - rules observed: 380122
• CVE-2021-24791 - Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection - rules observed: 380122
• CVE-2021-24862 - WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection - rules observed: 380122
• CVE-2021-39411 - Hospital Management System 1.0 - Cross-Site Scripting - rules observed: 340147
• CVE-2022-0228 - Popup Builder < 4.0.7 - SQL Injection - rules observed: 380122
• CVE-2022-2219 - Unyson < 2.7.27 - Cross Site Scripting - rules observed: 341266
• CVE-2022-32007 - Complete Online Job Search System 1.0 - SQL Injection - rules observed: 340016
• CVE-2023-1408 - Video List Manager <= 1.7 - SQL Injection - rules observed: 380122
• CVE-2023-33439 - Faculty Evaluation System v1.0 - SQL Injection - rules observed: 340159
• CVE-2024-11921 - Give WP Plugin < 3.19.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2015-4062 - WordPress NewStatPress 0.9.8 - SQL Injection - rules observed: 380122
• CVE-2021-24947 - WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read - rules observed: 347009
• CVE-2021-29006 - rConfig 3.9.6 - Local File Inclusion - rules observed: 347009
• CVE-2021-40651 - OS4Ed OpenSIS Community 8.0 - Local File Inclusion - rules observed: 347009
• CVE-2015-9312 - NewStatPress <=1.0.4 - Cross-Site Scripting - rules observed: 347198
• CVE-2016-10973 - Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2017-14622 - WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18487 - AdPush < 1.44 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18490 - Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18491 - Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18492 - Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18493 - Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18494 - Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18496 - Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18500 - Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18501 - Social Login by BestWebSoft < 0.2 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18502 - Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18505 - BestWebSoft’s Twitter < 2.55 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18516 - LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18517 - Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18518 - SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18527 - Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18528 - PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18529 - PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18530 - Rating by BestWebSoft < 0.2 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18532 - Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18537 - Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18542 - Zendesk Help Center by BestWebSoft < 1.0.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18556 - Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18557 - Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18558 - Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18562 - Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18564 - Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18565 - Updater by BestWebSoft < 1.35 - Cross-Site Scripting - rules observed: 341266
• CVE-2017-18566 - User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2018-19136 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 341266
• CVE-2018-19137 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 341266
• CVE-2018-19287 - WordPress Ninja Forms <3.3.18 - Cross-Site Scripting - rules observed: 347198
• CVE-2019-14789 - Custom 404 Pro < 3.2.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2019-15811 - DomainMOD <=4.13.0 - Cross-Site Scripting - rules observed: 333141
• CVE-2020-13121 - Submitty <= 20.04.01 - Open Redirect - rules observed: 340162
• CVE-2020-18268 - Z-Blog <=1.5.2 - Open Redirect - rules observed: 390500, 390501
• CVE-2020-5191 - PHPGurukul Hospital Management System - Cross-Site Scripting - rules observed: 342259
• CVE-2021-20792 - WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24169 - WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting - rules observed: 341266
• CVE-2021-24300 - WordPress WooCommerce <1.13.22 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24409 - Prismatic < 2.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24436 - WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24488 - WordPress Post Grid <2.1.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24510 - WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24875 - WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24926 - WordPress Domain Check <1.0.17 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24934 - Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24940 - WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24956 - Blog2Social < 6.8.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-24979 - Paid Memberships Pro < 2.6.6 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-25008 - The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-25055 - WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting - rules observed: 347198
• CVE-2021-25063 - WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-25078 - Affiliates Manager < 2.9.0 - Cross Site Scripting - rules observed: 347198
• CVE-2021-25079 - Contact Form Entries < 1.2.4 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-25104 - WordPress Ocean Extra <1.9.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-25112 - WordPress WHMCS Bridge <6.4b - Cross-Site Scripting - rules observed: 347198
• CVE-2021-25120 - Easy Social Feed < 6.2.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-34640 - WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-34643 - WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-39320 - WordPress Under Construction <1.19 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-39322 - WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2021-39350 - FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting - rules observed: 341266
• CVE-2022-0147 - WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-0149 - WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-0206 - WordPress NewStatPress <1.3.6 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-0533 - Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-0599 - WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-0864 - UpdraftPlus < 1.22.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-0899 - Header Footer Code Manager < 1.1.24 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-1007 - WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-1756 - Newsletter < 7.4.5 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-1937 - WordPress Awin Data Feed <=1.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-2168 - WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting - rules observed: 341266
• CVE-2022-2599 - WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-2733 - Openemr < 7.0.0.1 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-29004 - Diary Management System 1.0 - Cross-Site Scripting - rules observed: 340147
• CVE-2022-29005 - Online Birth Certificate System 1.2 - Stored Cross-Site Scripting - rules observed: 340147
• CVE-2022-30513 - School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting - rules observed: 392301
• CVE-2022-30514 - School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting - rules observed: 392301
• CVE-2022-3062 - Simple File List < 4.4.12 - Cross Site Scripting - rules observed: 347198
• CVE-2022-3578 - WordPress ProfileGrid <5.1.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-38295 - Cuppa CMS v1.0 - Cross Site Scripting - rules observed: 340147
• CVE-2022-3908 - WordPress Helloprint <1.4.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-43014 - OpenCATS 0.9.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-43015 - OpenCATS 0.9.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-43016 - OpenCATS 0.9.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-43017 - OpenCATS 0.9.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-43018 - OpenCATS 0.9.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-4325 - WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting - rules observed: 341266
• CVE-2022-4897 - WordPress BackupBuddy <8.8.3 - Cross Site Scripting - rules observed: 347198
• CVE-2022-4971 - Sassy Social Share <= 3.3.3 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-0099 - Simple URLs < 115 - Cross Site Scripting - rules observed: 347198
• CVE-2023-0236 - WordPress Tutor LMS <2.0.10 - Cross Site Scripting - rules observed: 333141
• CVE-2023-0602 - Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-0676 - phpIPAM 1.5.1 - Cross-site Scripting - rules observed: 340147
• CVE-2023-0942 - WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-0948 - WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-0968 - WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-1080 - WordPress GN Publisher <1.5.6 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-1546 - MyCryptoCheckout < 2.124 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-1780 - Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-1835 - Ninja Forms < 3.6.22 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-1890 - Tablesome < 1.0.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-2023 - Custom 404 Pro < 3.7.3 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-2122 - Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-24657 - phpIPAM - 1.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-25346 - ChurchCRM 4.5.3 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-2624 - KiviCare WordPress Plugin - Cross-Site Scripting - rules observed: 347198
• CVE-2023-2779 - Super Socializer < 7.13.52 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-27922 - Newsletter < 7.6.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-29439 - FooGallery plugin <= 2.2.35 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-30777 - Advanced Custom Fields < 6.1.6 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-30868 - Tree Page View Plugin < 1.6.7 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-34599 - Gibbon v25.0.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-37580 - Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-37988 - Contact Form Generator <= 2.5.5 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-3936 - Blog2Social < 7.2.1 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-4148 - Ditty < 3.1.25 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-44393 - Piwigo - Cross-Site Scripting - rules observed: 341266
• CVE-2023-6697 - WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting - rules observed: 347198
• CVE-2024-3469 - GP Premium <= 2.4.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2024-7313 - Shield Security Plugin < 20.0.6 - Cross-Site Scripting - rules observed: 341266
• CVE-2025-1035 - KLog Server - Path Traversal - rules observed: 347009
• CVE-2017-3131 - FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting - rules observed: 347198
• CVE-2020-20988 - DomainMOD 4.13.0 - Cross-Site Scripting - rules observed: 340147
• CVE-2021-25065 - Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting - rules observed: 347198
• CVE-2021-25067 - Landing Page Builder < 1.4.9.6 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-46005 - Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting - rules observed: 340147
• CVE-2022-0148 - WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-0928 - Microweber < 1.2.12 - Stored Cross-Site Scripting - rules observed: 333141
• CVE-2022-0954 - Microweber <1.2.11 - Stored Cross-Site Scripting - rules observed: 333141
• CVE-2022-3933 - WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting - rules observed: 341266
• CVE-2022-3934 - WordPress FlatPM <3.0.13 - Cross-Site Scripting - rules observed: 347198
• CVE-2022-4306 - WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting - rules observed: 350148
• CVE-2023-26842 - ChurchCRM 4.5.3 - Cross-Site Scripting - rules observed: 333141
• CVE-2023-26843 - ChurchCRM 4.5.3 - Cross-Site Scripting - rules observed: 333141
• CVE-2023-28665 - Woo Bulk Price Update <2.2.2 - Cross-Site Scripting - rules observed: 347198
• CVE-2023-31548 - ChurchCRM v4.5.3 - Cross-Site Scripting - rules observed: 333141
• CVE-2023-40753 - PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting - rules observed: 341266
• CVE-2018-1000856 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19749 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19751 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19752 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19892 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19914 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-19915 - DomainMOD <=4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-20009 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-20010 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2018-20011 - DomainMOD 4.11.01 - Cross-Site Scripting - rules observed: 340147
• CVE-2019-15829 - Gallery Photoblocks < 1.1.43 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-24991 - WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting - rules observed: 347198
• CVE-2021-46068 - Vehicle Service Management System - Stored Cross-Site Scripting - rules observed: 340147
• CVE-2021-46069 - Vehicle Service Management System 1.0 - Stored Cross Site Scripting - rules observed: 340147
• CVE-2021-46071 - ehicle Service Management System 1.0 - Cross-Site Scripting - rules observed: 340147
• CVE-2021-46072 - Vehicle Service Management System 1.0 - Stored Cross Site Scripting - rules observed: 340147
• CVE-2021-46073 - Vehicle Service Management System 1.0 - Cross Site Scripting - rules observed: 340147
• CVE-2024-0986 - Issabel Authenticated - Remote Code Execution - rules observed: 344362
• CVE-2021-42663 - Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting - rules observed: 341266
• CVE-2015-4063 - NewStatPress <0.9.9 - Cross-Site Scripting - rules observed: 341266
• CVE-2023-2252 - Directorist < 7.5.4 - Local File Inclusion - rules observed: 347009
• CVE-2026-11111 - Research note for exploit techniques associated with CVE-2026-11111 - rules observed: 340016, 340162
• CVE-2026-48907 - Research note for exploit techniques associated with CVE-2026-48907 - rules observed: 383871, 333360