Protected vulnerabilities.

BitFire RASP blocks CVE-2026-14488 at the database layer by preventing users without the required WordPress capabilities from deleting posts and pages.

Affected sites

600,000+

Attack class

Missing Authorization

BitFire blocks CVE-2026-63030 with verified-browser POST protection, SQL injection detection, and RASP prevention of administrator account creation.

Affected sites

500,000,000+

Attack class

Sql Injection

BitFire blocks automated CVE-2026-5524 upload requests and uses PRO RASP to prevent Divi Form Builder from creating unauthorized executable PHP files.

Affected sites

2,600,000

Attack class

Arbitrary File Upload

BitFire blocks automated exploit requests and uses PRO RASP to prevent CVE-2026-15158 from creating an unauthorized PHP file through Blocksy Companion Pro.

Affected sites

300,000+

Attack class

Arbitrary File Upload

BitFire blocks automated forged UpdraftPlus RPC requests and uses PRO RASP to prevent a malicious plugin ZIP from creating unauthorized PHP files.

Affected sites

3,000,000+

Attack class

Authentication Bypass

AI Engine exposes its MCP bearer token in public REST API discovery data, while BitFire PRO RASP prevents an MCP request authenticated only by that plugin token from creating a new administrator account.

Affected sites

100,000+

Attack class

Sensitive Information Exposure