Protected vulnerabilities.

BitFire's FREE WAF and Bot Protection stop the unauthenticated Contact Form 7 POST that plants stored XSS in Zero Spam's admin Detection Log.

Affected sites

20,000+

Attack class

Stored Cross-site Scripting

BitFire's WAF blocks the wpForo CVE-2026-93747 stored XSS payload at the request layer, before it is stored or ever rendered to an admin.

Affected sites

20,000+

Attack class

Stored Cross-site Scripting

BitFire FREE blocks the double-encoded traversal before vulnerable WordPress template resolution can include an attacker-selected PHP file.

Affected sites

+100,000,000

Attack class

Path Traversal And Local File Inclusion

BitFire FREE blocks the double-encoded traversal local file inclusion before vulnerable WordPress template resolution can include an attacker-selected PHP file.

Affected sites

+100,000,000

Attack class

Path Traversal And Local File Inclusion

BitFire FREE detects the serialized PHP object behind CVE-2026-82222 before GiveWP can deserialize it and trigger remote code execution.

Affected sites

100,000+

Attack class

Php Object Injection

BitFire blocks malicious uploads and PRO RASP prevents unauthorized PHAR creation through the vulnerable Contact Form 7 add-on.

Affected sites

60,000

Attack class

Unrestricted File Upload