Protected vulnerabilities.

BitFire FREE blocks the double-encoded traversal local file inclusion before vulnerable WordPress template resolution can include an attacker-selected PHP file.

Affected sites

+100,000,000

Attack class

Path Traversal And Local File Inclusion

BitFire FREE detects the serialized PHP object behind CVE-2026-82222 before GiveWP can deserialize it and trigger remote code execution.

Affected sites

100,000+

Attack class

Php Object Injection

BitFire blocks malicious uploads and PRO RASP prevents unauthorized PHAR creation through the vulnerable Contact Form 7 add-on.

Affected sites

60,000

Attack class

Unrestricted File Upload

BitFire PRO RASP blocks unauthorized PHP-file writes that turn the Avada and Fusion Builder flaw into persistent server compromise.

Affected sites

700,000+

Attack class

Arbitrary File Write

ManageWP Worker authentication bypass can log attackers in as other users, while BitFire PRO RASP blocks unauthorized session creation.

Affected sites

1,000,900+

Attack class

Authentication Bypass

BitFire PRO RASP blocks unauthorized administrator password changes that turn CVE-2026-12526 into account takeover.

Affected sites

2,000,000+

Attack class

Privilege Escalation