Overview for rules released by Trustwave SpiderLabs in April for ModSecurity Commercial Rules package. The rules are available for versions 2.9.x and 3.x of ModSecurity.
ModSecurity Commercial Rules detect attacks or classes of attacks on web applications and their components as well as provide virtual patches for public vulnerabilities.
Release Summary
- WordPress Plugin Watu Quiz < 3.3.8.2 - Reflected XSS CVE-2023-0428
- WordPress Plugin BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting CVE-2022-4897
- WordPress Plugin ReviewX <= 1.6.6 Authenticated SQL Injection CVE-2023-26325
- WordPress Plugin Waiting One-click Countdowns <= 0.6.2 Authenticated SQL Injection CVE-2023-28659
- WordPress Plugin Events Made Easy <= 2.3.14 Authenticated SQL Injection CVE-2023-28660
- WordPress Plugin WP Popup Banners <= 1.2.5 Authenticated SQL Injection CVE-2023-28661
- WordPress Plugin Gift Cards (Gift Vouchers and Packages) <= 4.3.1 Unauthenticated SQL Injection CVE-2023-28662
- WordPress Plugin Formidable PRO2PDF <3.11 Authenticated SQL Injection CVE-2023-28663
- WordPress Plugin GigPress <= 2.3.28 - Subscriber+ SQLi CVE-2023-0381
- WordPress Plugin Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download CVE-2023-0331
- WordPress Plugin GeoDirectory < 2.2.24 - Admin+ SQLi CVE-2023-0278
- WordPress Plugin ShortPixel Adaptive Images < 3.6.3 - Reflected XSS CVE-2023-0334
- WordPress Plugin Drag and Drop Multiple File Uploader PRO Contact Form 7 v5.0.6.1 Path Traversal CVE-2023-1112
How to Update
All the rules released this month are available for download and can be configured using the ModSecurity Dashboard. The rules are associated with the default profile and enabled for all licensed servers. To verify the rules were successfully downloaded by ModSecurity, log in to the ModSecurity Dashboard and verify the server "Last seen" date, which indicates the last successful download for the specified server.
