Protected vulnerabilities.

BitFire PRO RASP contains protected takeover and persistence outcomes from unauthenticated WordPress hook injection.

Affected sites

70,000

Attack class

Unauthenticated Hook Injection

BitFire blocks automated Forminator submission exploits and uses PRO RASP to prevent CVE-2026-15748 from creating unauthorized PHP files.

Affected sites

600,000+

Attack class

Arbitrary File Upload

BitFire PRO RASP blocks unauthorized PHP-file writes that can turn Divi Ajax Filter file inclusion into persistent server compromise.

Affected sites

2,000,000+

Attack class

Local File Inclusion

BitFire RASP blocks CVE-2026-14488 at the database layer by preventing users without the required WordPress capabilities from deleting posts and pages.

Affected sites

600,000+

Attack class

Missing Authorization

BitFire blocks CVE-2026-63030 with verified-browser POST protection, SQL injection detection, and RASP prevention of administrator account creation.

Affected sites

500,000,000+

Attack class

Sql Injection

Profile Builder could turn a failed registration into an administrator autologin link, while BitFire authentication RASP prevents unauthenticated requests from minting WordPress auth cookies.

Affected sites

50,000+

Attack class

Authentication Bypass