Protected vulnerabilities.

Profile Builder could turn a failed registration into an administrator autologin link, while BitFire authentication RASP prevents unauthenticated requests from minting WordPress auth cookies.

Affected sites

50,000+

Attack class

Authentication Bypass

BitFire blocks automated CVE-2026-5524 upload requests and uses PRO RASP to prevent Divi Form Builder from creating unauthorized executable PHP files.

Affected sites

2,600,000

Attack class

Arbitrary File Upload

BitFire blocks automated exploit requests and uses PRO RASP to prevent CVE-2026-15158 from creating an unauthorized PHP file through Blocksy Companion Pro.

Affected sites

300,000+

Attack class

Arbitrary File Upload

BitFire blocks automated forged UpdraftPlus RPC requests and uses PRO RASP to prevent a malicious plugin ZIP from creating unauthorized PHP files.

Affected sites

3,000,000+

Attack class

Authentication Bypass

AI Engine exposes its MCP bearer token in public REST API discovery data, while BitFire PRO RASP prevents an MCP request authenticated only by that plugin token from creating a new administrator account.

Affected sites

100,000+

Attack class

Sensitive Information Exposure

BitFire blocks CVE-2025-7340 with bot protection, WAF upload controls, and operating-system-level RASP protection against unauthorized PHP file changes.

Affected sites

10,000+

Attack class

Arbitrary File Upload