The firewall also uses a number of generic rules that use pattern matching to determine if a request appears to be malicious. The patterns for these attacks are specific and require minimal processing in determining if the request matches. The Wordfence firewall also has a number of rules that match known attacks commonly seen and exploited in the wild. Unsanitized path/file names that can be used to execute potentially malicious code available to the web server’s file system.Ī “feature” of XML that can be used to trick the web server into serving files containing credentials or other potentially sensitive information. Unsanitized path names that can be used to trick the web server into serving files containing credentials or other potentially sensitive information. Unsanitized files containing malicious code that can be uploaded to and executed by the web server. Unsanitized HTML or JavaScript code used to hijack a user or administrator’s browser session and perform actions as the user. Unsanitized SQL code that can compromise a database system. Some of the more general types of attacks we protect against are: SQL Injection It is set up to run at the beginning of WordPress’ initialization to filter any attacks before plugins or themes can run any potentially vulnerable code. The Wordfence Web Application Firewall (WAF) protects against a number of common web-based attacks as well as a large amount of attacks specifically targeted at WordPress and WordPress themes and plugins. In This Article What it Protects Against Firewall Status Firewall Optimization Disabling the Firewall Files Used by the Firewall What it Protects Against

Firewall web application