Da

✏️ Editing: wp_rules.yaml

# Beta rules for wp-plugin.
CVE-2024-7031:
  cve: CVE-2024-7031
  mode: pass
  target: plugin
  slug: filester
  versions: "<=1.8.2"
  ajax_action: njt_fs_action
  config:
    capability: manage_options
CVE-2025-6814:
  cve: CVE-2025-6814
  mode: pass
  target: plugin
  slug: booking-x
  versions: ">=1.1.0"
  method: POST
  action: init
  conditions:
    - name: ARGS:export_xml
      type: exists
    - name: ARGS:export_xml
      type: equals
      value: Export xml
  config:
    capability: manage_options
CVE-2025-5282:
  cve: CVE-2025-5282
  mode: pass
  target: plugin
  slug: wp-travel-engine
  versions: "<=6.5.1"
  method: DELETE
  action: rest_api_init
  conditions:
    - name: REQUEST_URI
      type: contains
      value: wptravelengine/v2/trips
    - name: ARGS:id
      type: exists
    - name: ARGS:package_id
      type: exists
  config:
    capability: edit_posts
CVE-2023-7306:
  cve: CVE-2023-7306
  mode: pass
  target: plugin
  slug: nmedia-user-file-uploader
  versions: "<=21.5"
  ajax_action: wpfm_delete_multiple_files
  conditions:
    - name: ARGS:file_ids
      type: exists
  config:
    capability: read # really just checking if a user is logged in

📁 Sid Gifari File Manager