Protected vulnerabilities.

BitFire PRO RASP blocks unauthorized PHP-file writes that can turn Divi Ajax Filter file inclusion into persistent server compromise.

Affected sites

2,000,000+

Attack class

Local File Inclusion

BitFire RASP blocks CVE-2026-14488 at the database layer by preventing users without the required WordPress capabilities from deleting posts and pages.

Affected sites

600,000+

Attack class

Missing Authorization

BitFire blocks CVE-2026-63030 with verified-browser POST protection, SQL injection detection, and RASP prevention of administrator account creation.

Affected sites

500,000,000+

Attack class

Sql Injection

Profile Builder could turn a failed registration into an administrator autologin link, while BitFire authentication RASP prevents unauthenticated requests from minting WordPress auth cookies.

Affected sites

50,000+

Attack class

Authentication Bypass

BitFire blocks automated CVE-2026-5524 upload requests and uses PRO RASP to prevent Divi Form Builder from creating unauthorized executable PHP files.

Affected sites

2,600,000

Attack class

Arbitrary File Upload

BitFire blocks automated exploit requests and uses PRO RASP to prevent CVE-2026-15158 from creating an unauthorized PHP file through Blocksy Companion Pro.

Affected sites

300,000+

Attack class

Arbitrary File Upload