On this page
Atomicorp WAF Rule 331324
Rule Summary
- Rule ID: 331324
- Status: Active
- Alert message: Atomicorp.com WAF Rules - Virtual Just In Time Patch: WPCargo barcode.php: executable filepath blocked
- Observed CWEs: CWE-94 (1), CWE-434 (1)
- Revision: 1
- Phase: 2 (request body)
- Request surfaces: Request filename
- Rule action: pass
- Public tags: wordpress, wpcargo
- Logging: log
Description
This rule detects behavior identified by its current alert as “Virtual Just In Time Patch: WPCargo barcode.php: executable filepath blocked” in the request filename. It evaluates during the request body phase and records the match without a disruptive action.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2021-25003 | WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution | wpcargo track & trace | 9.8 (v3.1) | Critical |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-94 | CVE-2021-25003 |
| CWE-434 | CVE-2021-25003 |