<?php exit; ?>{"enabled":1,"blocked_msg":"PGJyIC8+PGJyIC8+PGJyIC8+PGJyIC8+PGNlbnRlcj5Tb3JyeSA8Yj4lJVJFTV9BRERSRVNTJSU8L2I+LCB5b3VyIHJlcXVlc3QgY2Fubm90IGJlIHByb2Nlc3NlZC48YnIgLz5Gb3Igc2VjdXJpdHkgcmVhc29ucywgaXQgd2FzIGJsb2NrZWQgYW5kIGxvZ2dlZC48YnIgLz48YnIgLz4lJU5JTkpBX0xPR08lJTxiciAvPjxiciAvPklmIHlvdSBiZWxpZXZlIHRoaXMgd2FzIGFuIGVycm9yIHBsZWFzZSBjb250YWN0IHRoZTxiciAvPndlYm1hc3RlciBhbmQgZW5jbG9zZSB0aGUgZm9sbG93aW5nIGluY2lkZW50IElEOjxiciAvPjxiciAvPlsgPGI+IyUlTlVNX0lOQ0lERU5UJSU8L2I+IF08L2NlbnRlcj4=","logo":"https:\/\/agenciacrabli.com\/wp-content\/plugins\/ninjafirewall\/images\/ninjafirewall_75.png","ret_code":403,"scan_protocol":3,"get_scan":1,"widgetnews":4,"anon_ip":0,"debug":0,"uploads":1,"sanitise_fn":0,"get_sanitise":0,"post_scan":1,"post_sanitise":0,"cookies_scan":1,"cookies_sanitise":0,"ua_scan":1,"ua_sanitise":1,"referer_scan":0,"referer_sanitise":1,"referer_post":0,"no_host_ip":0,"allow_local_ip":1,"php_errors":1,"php_self":1,"php_path_t":1,"php_path_i":1,"wp_dir":"\/wp-admin\/(?:css|images|includes|js)\/|\/wp-includes\/(?:(?:css|images|js(?!\/tinymce\/wp-tinymce\\.php)|theme-compat)\/|[^\/]+\\.php)|\/wp-content\/(?:uploads|blogs\\.dir)\/","no_post_themes":0,"force_ssl":0,"disallow_edit":0,"disallow_mods":0,"disable_error_handler":0,"wl_admin":1,"a_0":"0","a_11":0,"a_12":0,"a_13":0,"a_14":0,"a_15":0,"a_16":0,"a_21":0,"a_22":0,"a_23":0,"a_24":0,"a_31":0,"a_41":0,"a_51":0,"sched_scan":0,"report_scan":0,"secupdates":0,"a_52":0,"a_61":1,"alert_email":"jaimeluisgg@gmail.com","alert_sa_only":"2","nt_show_status":1,"post_b64":1,"disallow_creation":0,"disallow_settings":1,"disallow_privesc":1,"disallow_publish":0,"no_xmlrpc":0,"no_xmlrpc_multi":0,"no_xmlrpc_pingback":0,"enum_archives":0,"enum_login":0,"enum_feed":0,"request_sanitise":0,"fg_enable":0,"fg_mtime":10,"fg_exclude":"","auto_del_log":0,"enable_updates":1,"sched_updates":1,"notify_updates":1,"clogs_enable":0,"clogs_pubkey":"","rate_notice":1601104811,"welcome":1,"response_headers":"0003000000","referrer_policy_enabled":0,"engine_version":"4.3.1","rules_version":"20220303.1"}
:-:
{"1":{"why":"Directory traversal #1","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT|PHP_SELF|PATH_INFO","wha":"(?:\\.{2}[\\\\\/]+){2}[a-zA-Z]","ope":5,"nor":1,"tra":3}}},"2":{"why":"ASCII character 0x00 (NULL byte)","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER|REQUEST_URI|PHP_SELF|PATH_INFO|FILES","wha":"\\x0","ope":5,"nor":1,"noc":1}}},"3":{"why":"Local file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|SERVER:HTTP_USER_AGENT","wha":"\\b(?:proc\/self\/|etc\/passwd)\\b","ope":5,"nor":1,"tra":3}}},"4":{"why":"Local file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"POST","wha":"\\betc\/passwd$","ope":5,"nor":1,"tra":3}}},"5":{"why":"Local file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|SERVER:HTTP_USER_AGENT","wha":"\\b(?i)(?:include|require)(?:_once)?\\s*.{0,10}\\s*sys_get_temp_dir\\b","ope":5}}},"6":{"why":"Directory traversal #2","lev":3,"ena":1,"cha":{"1":{"whe":"POST","wha":"^(?:\\.{2}[\\\\\/]+){2,}[-\\w\/\\s.]+\\.php$","ope":5,"nor":1,"tra":3}}},"7":{"why":"XML External Entity","lev":2,"ena":1,"cha":{"1":{"whe":"RAW","wha":"<!ENTITY[\\s+]+(?:%[\\s+]+)?\\w+[\\s+]+SYSTEM[\\s+]+[\"']","ope":5,"nor":1}}},"8":{"why":"Suspicious file","lev":3,"ena":1,"cha":{"1":{"whe":"FILES","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}},"cpb":"unfiltered_upload"},"50":{"why":"Remote file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|HTTP_USER_AGENT","wha":"^(?i:https?|ftp):\/\/.+\/[^&\/\\s]+\\?$","ope":5,"nor":1}}},"51":{"why":"Remote file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"^(?i)https?:\/\/(?:[hp]astebin\\.com|textbin\\.net)\/raw\/.","ope":5,"nor":1}}},"52":{"why":"Remote file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT","wha":"\\b(?i)(?:include|require)(?:_once)?\\s*.{0,10}[\"'](?:https?|ftp):\/\/","ope":5,"nor":1}}},"53":{"why":"Remote file inclusion","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_USER_AGENT","wha":"^(?i:ftp):\/\/(?:.+?:.+?\\@)?[^\/]+\/.","ope":5,"nor":1}}},"100":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"<(?i:applet|div|embed|form|i?frame(?:set)?|i(?:mg|sindex)|link|m(?:eta|arquee)|object|script|textarea)\\b.*=.*?>","ope":5,"nor":1}},"cpb":"unfiltered_html"},"101":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\W(?:background(-image)?|-moz-binding)\\s*:[^}]*?\\burl\\s*\\([^)]+?(https?:)?\/\/\\w","ope":5,"nor":1}},"cpb":"unfiltered_html"},"102":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|HTTP_USER_AGENT|HTTP_REFERER","wha":"<.+?(?i)\\b(?:href|(?:form)?action|background|code|data|location|name|poster|src|value)\\s*=\\s*\\\\?['\"]?(?:(?:f|ht)tps?:)?\\\\?\/\\\\?\/\\w+\\.\\w","ope":5,"nor":1}},"cpb":"unfiltered_html"},"104":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT","wha":"\\b(?:alert|confirm|eval|expression|prompt|set(?:Timeout|Interval)|String\\s*\\.\\s*fromCharCode|\\.\\s*substr)\\s*\\(.*?\\)","ope":5,"nor":1}},"cpb":"unfiltered_html"},"105":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT","wha":"\\bdocument\\s*\\.\\s*(?:body|cookie|domain|location|open|write(?:ln)?)\\b","ope":5,"nor":1}},"cpb":"unfiltered_html"},"106":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT","wha":"\\blocation\\s*\\.\\s*(?:href|replace)\\b","ope":5,"nor":1}},"cpb":"unfiltered_html"},"107":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT","wha":"\\bwindow\\s*\\.\\s*(?:open|location)\\b","ope":5,"nor":1}},"cpb":"unfiltered_html"},"108":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i)<style\\b.","ope":5,"nor":1}},"cpb":"unfiltered_html"},"109":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"POST","wha":"\\beval\\s*\\(\\s*String\\s*\\.\\s*fromCharCode\\s*\\(\\s*\\d","ope":5,"nor":1}},"cpb":"unfiltered_html"},"110":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"(?i)<[a-z].+?\\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\\s*=.+?","ope":5,"nor":1}},"cpb":"unfiltered_html"},"111":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"POST|RAW","wha":"(?i)<[a-z].+?\\bon(?:d(?:e(?:vice(?:(?:orienta|mo)tion|proximity|found|light)|livery(?:success|error)|activate)|r(?:ag(?:e(?:n(?:ter|d)|xit)|(?:gestur|leav)e|start|drop|over)|op)|i(?:s(?:c(?:hargingtimechange|onnect(?:ing|ed))|abled)|aling)|ata(?:setc(?:omplete|hanged)|(?:availabl|chang)e|error)|urationchange|ownloading|blclick)|Moz(?:M(?:agnifyGesture(?:Update|Start)?|ouse(?:PixelScroll|Hittest))|S(?:wipeGesture(?:Update|Start|End)?|crolledAreaChanged)|(?:(?:Press)?TapGestur|BeforeResiz)e|EdgeUI(?:C(?:omplet|ancel)|Start)ed|RotateGesture(?:Update|Start)?|A(?:udioAvailable|fterPaint))|c(?:o(?:m(?:p(?:osition(?:update|start|end)|lete)|mand(?:update)?)|n(?:t(?:rolselect|extmenu)|nect(?:ing|ed))|py)|a(?:(?:llschang|ch)ed|nplay(?:through)?|rdstatechange)|h(?:(?:arging(?:time)?ch)?ange|ecking)|(?:fstate|ell)change|u(?:echange|t)|l(?:ick|ose))|s(?:t(?:a(?:t(?:uschanged|echange)|lled|rt)|k(?:sessione|comma)nd|op)|e(?:ek(?:complete|ing|ed)|(?:lec(?:tstar)?)?t|n(?:ding|t))|(?:peech|ound)(?:start|end)|u(?:ccess|spend|bmit)|croll|how)|m(?:o(?:z(?:(?:pointerlock|fullscreen)(?:change|error)|(?:orientation|time)change|network(?:down|up)load)|use(?:(?:lea|mo)ve|o(?:ver|ut)|enter|wheel|down|up)|ve(?:start|end)?)|essage|ark)|a(?:n(?:imation(?:iteration|start|end)|tennastatechange)|fter(?:(?:scriptexecu|upda)te|print)|udio(?:process|start|end)|d(?:apteradded|dtrack)|ctivate|lerting|bort)|b(?:e(?:fore(?:(?:(?:de)?activa|scriptexecu)te|u(?:nload|pdate)|p(?:aste|rint)|c(?:opy|ut)|editfocus)|gin(?:Event)?)|oun(?:dary|ce)|l(?:ocked|ur)|roadcast|usy)|DOM(?:Node(?:Inserted(?:IntoDocument)?|Removed(?:FromDocument)?)|(?:CharacterData|Subtree)Modified|A(?:ttrModified|ctivate)|Focus(?:Out|In)|MouseScroll)|r(?:e(?:s(?:u(?:m(?:ing|e)|lt)|ize|et)|adystatechange|pea(?:tEven)?t|movetrack|trieving|ceived)|ow(?:s(?:inserted|delete)|e(?:nter|xit))|atechange)|p(?:op(?:up(?:hid(?:den|ing)|show(?:ing|n))|state)|a(?:ge(?:hide|show)|(?:st|us)e|int)|ro(?:pertychange|gress)|lay(?:ing)?)|t(?:ouch(?:(?:lea|mo)ve|en(?:ter|d)|cancel|start)|ransition(?:cancel|end|run)|ime(?:update|out)|ext)|u(?:s(?:erproximity|sdreceived)|p(?:gradeneeded|dateready)|n(?:derflow|load))|f(?:o(?:rm(?:change|input)|cus(?:out|in)?)|i(?:lterchange|nish)|ailed)|l(?:o(?:ad(?:e(?:d(?:meta)?data|nd)|start)|secapture)|evelchange|y)|g(?:amepad(?:(?:dis)?connected|button(?:down|up)|axismove)|et)|e(?:n(?:d(?:Event|ed)?|abled|ter)|rror(?:update)?|mptied|xit)|i(?:cc(?:cardlockerror|infochange)|n(?:coming|valid|put))|o(?:(?:(?:ff|n)lin|bsolet)e|verflow(?:changed)?|pen)|SVG(?:(?:Unl|L)oad|Resize|Scroll|Abort|Error|Zoom)|h(?:e(?:adphoneschange|l[dp])|ashchange|olding)|v(?:o(?:lum|ic)e|ersion)change|w(?:a(?:it|rn)ing|heel)|key(?:press|down|up)|(?:AppComman|Loa)d|no(?:update|match)|Request|zoom)\\s*=\\s*.+?","ope":5,"nor":1}},"cpb":"unfiltered_html"},"112":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"<.+?(?i)[a-z]+\\s*=.*?(?:java|vb)script:.+?","ope":5,"nor":1}},"cpb":"unfiltered_html"},"113":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"POST","wha":"<.+?(?i)[a-z]+\\s*=.*?(?:java|vb)script:.+?","ope":5,"nor":1}},"cpb":"unfiltered_html"},"114":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING|GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI","wha":"(?i)<script\\b.","ope":5,"nor":1}},"cpb":"unfiltered_html"},"115":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"POST|RAW","wha":"(?i)<script\\b.","ope":5,"nor":1}},"cpb":"unfiltered_html"},"116":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|RAW","wha":"<x:script\\b.","ope":5,"nor":1}},"cpb":"unfiltered_html"},"117":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"[{}+[\\]\\s]\\+\\s*\\[\\s*]\\s*\\)\\s*\\[[{!}+[\\]\\s]","ope":5,"nor":1}},"cpb":"unfiltered_html"},"118":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\+A(?:Dw|ACIAPgA8)-.+?\\+AD4(?:APAAi)?-","ope":5,"nor":1}}},"119":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"POST|GET|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"(?i)[\\s\"'\\x60;,\\\/0-9=\\x0B\\x09\\x0C(]+on(?:abort|blur|change|click|close|dblclick|dragdrop|endevent|error|exit|focus(?:in|out)?|formchange|form(?:data|input)|input|key(?:down|press|statuschange|up)|load[a-z]{0,10}|(?:mouse|pointer)[a-z]{2,10}|move|move(?:end|start)|reset|resize|noupdate|scroll|select|submit|success|svgload|timeout|unload)\\s*[=;,|'\"]","ope":5,"nor":1}},"cpb":"unfiltered_html"},"120":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i)<[a-z]+\\\\?\/[a-z]+.+?=.+?>","ope":5,"nor":1}},"cpb":"unfiltered_html"},"121":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\batob\\s*(?:['\"\\x60]\\s*\\]\\s*)?\\(\\s*(['\"\\x60])[a-zA-Z0-9\/+=]+\\1\\s*\\)","ope":5,"nor":1,"tra":2}},"cpb":"unfiltered_html"},"122":{"why":"Cross-site scripting","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\[\\s*\\]\\s*\\[\\s*['\"\\x60]filter['\"\\x60]\\s*\\]\\s*\\[\\s*['\"\\x60]constructor['\"\\x60]\\s*\\]\\s*\\(\\s*","ope":5,"nor":1,"tra":2}},"cpb":"unfiltered_html"},"123":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET","wha":"\\b(?:document|window|this)\\s*\\[.+?\\]\\s*[\\[(]","ope":5,"nor":1,"tra":2}}},"125":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|HTTP_USER_AGENT","wha":"(?:(?:\\b(?:self|this|top|window)\\s*\\[.+?\\]|\\(\\s*(?:alert|confirm|eval|expression|prompt)\\s*\\)|\\[.*?\\]\\s*\\.\\s*find)|(?:\\.\\s*(?:re(?:ject|place)|constructor)))\\s*\\(.*?\\)","ope":5,"nor":1,"tra":2}},"cpb":"unfiltered_html"},"126":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|HTTP_USER_AGENT","wha":"\\b(\\w+)\\s*=\\s*(?:alert|confirm|eval|expression|prompt)\\s*[;,]\\1\\s*\\(.*?\\)","ope":5,"nor":1,"tra":2}},"cpb":"unfiltered_html"},"127":{"why":"Cross-site scripting","lev":2,"ena":1,"cha":{"1":{"whe":"GET|HTTP_USER_AGENT","wha":"\\bFunction\\s*[({].*?[})]\\s*\\(.*?\\)|\\bfunction\\s*\\(.+?\\)\\s*{.+?}|(?:\\[|new)\\s*class\\s*extends\\b|\\bArray\\s*.\\s*from\\b","ope":5,"nor":1,"tra":2}},"cpb":"unfiltered_html"},"128":{"why":"Attribute JS injection","lev":3,"ena":1,"cha":{"1":{"whe":"POST|GET|SERVER:HTTP_REFERER|SERVER:HTTP_USER_AGENT","wha":"(?i)(?:\\W|^)javascript:(?!void\\().{8}","ope":5,"nor":1}},"cpb":"unfiltered_html"},"150":{"why":"Mail header injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"\\x0A\\b(?i:(?:reply-)?to|b?cc|content-[td]\\w)\\s*:.*?\\@","ope":5,"nor":1,"noc":1}}},"153":{"why":"SSI command injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_USER_AGENT|HTTP_REFERER","wha":"<!--#(?:config|echo|exec|flastmod|fsize|include)\\b.+?-->","ope":5,"nor":1}}},"154":{"why":"Code injection","lev":3,"ena":1,"cha":{"1":{"whe":"COOKIE|HTTP_USER_AGENT|HTTP_REFERER","wha":"(?s:<\\?.+)|#!\/(?:usr|bin)\/.+?\\s","ope":5,"nor":1}}},"155":{"why":"Code injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_USER_AGENT","wha":"(?:<\\?(?![Xx][Mm][Ll]).*?(?:\\$_?(?:COOKIE|ENV|FILES|GLOBALS|(?:GE|POS|REQUES)T|SE(RVER|SSION))\\s*[=\\[)]|\\b(?i:array_map|assert|base64_(?:de|en)code|curl_exec|eval|(?:ex|im)plode|file(?:_get_contents)?|fsockopen|function_exists|gzinflate|move_uploaded_file|passthru|[ep]reg_replace|phpinfo|stripslashes|strrev|substr|system|(?:shell_)?exec)\\s*(?:\/\\*.+?\\*\/\\s*)?\\())|#!\/(?:usr|bin)\/.+?\\s|\\W\\$\\{\\s*['\"]\\w+['\"]","ope":5,"nor":1}}},"156":{"why":"Code injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_USER_AGENT","wha":"\\b(?i:eval)\\s*\\(\\s*(?i:base64_decode|exec|file_get_contents|gzinflate|passthru|shell_exec|stripslashes|system)\\s*\\(","ope":5,"nor":1}}},"159":{"why":"Apache Log4j vulnerability (CVE-2021-44228)","lev":3,"ena":1,"cha":{"1":{"whe":"GET|SERVER","wha":"${jndi:ldap:\/\/","ope":3,"nor":1}}},"160":{"why":"Shellshock vulnerability (CVE-2014-6271)","lev":3,"ena":1,"cha":{"1":{"whe":"GET|SERVER","wha":"^\\s*\\(\\s*\\)\\s*\\{","ope":5,"nor":1}}},"250":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|FILES","wha":"^[-\\d';].+\\w.+(?:--[\\x00-\\x20\\x7f]*|#|\/\\*)$","ope":5,"nor":1,"cap":1},"2":{"wha":"(?i)(?:\\b|\\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\\s+(?:not\\s+)?null|limit|load(?:_file)?|order\\s+by|password|rename|r?like|select|(?:pg_)?sleep|substring|table|truncate|union|update|version)\\b","ope":5,"nor":1}}},"251":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i)(?:\\b|\\d)(?:ceil|concat|conv|floor|version)\\b","ope":5,"nor":1,"cap":1},"2":{"wha":"(?i)(?:\\b|\\d)(?:pi\\s*\\(.*?\\).+?){3}","ope":5,"nor":1}}},"253":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE","wha":"^(?i:admin(?:istrator)?)['\"].*?(?:--|#|\/\\*)","ope":5,"nor":1}}},"254":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"(?i)\\b[-\\w]+@(?:[-a-z0-9]+\\.)+[a-z]{2,8}'.{0,20}[^a-z](?:\\band\\b|&&).{0,20}=[\\s\/*]*'","ope":5,"nor":1}}},"256":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER","wha":"(?:\\band\\b|\\bor\\b|\\bhaving\\b|&&|\\|\\|)\\s*(?:\\d+\\s*)+(?:[!<]?=|=>?|[<>]|(?:not\\s+)?like)(?:\\s*\\d)+","ope":5,"nor":1,"tra":1}}},"257":{"why":"SQL injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_USER_AGENT|HTTP_REFERER","wha":"(?:\\band\\b|\\bor\\b|\\bhaving\\b|&&|\\|\\|).{0,250}\\b(\\w+)\\b\\s*(?:[!<]?=|=>?|[<>]|(?:not\\s+)?like)\\s*\\1\\b","ope":5,"nor":1,"tra":1}}},"258":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|SERVER","wha":".{5}\\bfrom\\b.{1,30}\\b(?:information|performance)_schema\\s*\\.\\s*\\w","ope":5,"nor":1,"tra":1}}},"259":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"^-?\\d+.{0,30}(?:\\band\\b.{0,30})?\\b(?i:union|select)\\b","ope":5,"nor":1,"cap":1},"2":{"wha":"(?i)(?:\\b|\\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\\s+(?:not\\s+)?null|limit|load(?:_file)?|order\\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|update|version)\\b","ope":5,"nor":1}}},"260":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|POST|FILES","wha":"^(?:\\b(?:null|and|or)\\b|\\|\\||&&)?\\s*union\\s+(?:all\\s+)?select\\b","ope":5,"nor":1,"tra":1}}},"261":{"why":"SQL injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|REQUEST_URI","wha":"(?:\\b(?:null|and|or)\\b|\\|\\||&&)\\s*.{0,50}\\bselect\\b.","ope":5,"nor":1,"tra":1,"cap":1},"2":{"wha":"(?i)(?:\\b|\\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\\s+(?:not\\s+)?null|limit|load(?:_file)?|order\\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version)\\b","ope":5,"nor":1}}},"262":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"^.{0,10}\\bselect\\b\\s.{1,50}\\bfrom\\b.","ope":5,"nor":1,"tra":1,"cap":1},"2":{"wha":"(?i)(?:\\b|\\d)(?:alter|(?:group_)?concat(?:_ws)?|benchmark|create|database|delete|drop|(?:dump|out)file|extractvalue|grant|insert|is\\s+(?:not\\s+)?null|limit|load(?:_file)?|order\\s+by|password|rename|r?like|(?:pg_)?sleep|substring|table|truncate|union|update|version|where)\\b","ope":5,"nor":1}}},"263":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"union all select","ope":3,"nor":1,"tra":1}}},"264":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"select concat","ope":3,"nor":1,"tra":1}}},"265":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"POST","wha":"^.{0,15}\\bunion\\s+select\\b.{1,100}(from|where)\\b","ope":5,"nor":1,"tra":1}}},"267":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\balter\\s+(?:(?:database|schema)\\b|table\\s+.{1,70}\\s+rename\\b|(?:ignore\\s+)?table\\b|user\\b(?:\\s+if\\s+exists\\s)?.{1,38}@).{1,70}","ope":5,"nor":1,"tra":1}}},"268":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\bcreate\\s+(?:(?:database|schema|(?:temporary\\s+)?table)\\s+(?:if\\s+not\\s+exists\\b)?.{1,70}|user\\s+.{1,38}@.{1,38}\\s+identified\\s+by\\s+)","ope":5,"nor":1,"tra":1}}},"269":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\bdrop\\s+(?:(?:table\\b|index\\b.{1,60}\\son\\b|(?:database|schema)\\s+(?:if\\s+exists\\b)?).{1,70}|user\\s+(?:if\\s+exists\\b)?.{1,38}@.{1,38})","ope":5,"nor":1,"tra":1}}},"270":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\brename\\s+table\\s+.{1,70}\\s+to\\s.{1,70}","ope":5,"nor":1,"tra":1}}},"271":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\bload\\s+data\\s+(?:(?:low_priority\\s+|concurrent\\s+)?local\\s+)?infile\\b.{1,500}\\binto\\s+table\\b.{2}","ope":5,"nor":1,"tra":1}}},"272":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\btruncate\\s+table\\s.{1,70}","ope":5,"nor":1,"tra":1}}},"273":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,30}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,20})?\\bselect\\b.{1,200}\\binto\\s+(?:(?:dump|out)file\\s|@\\w).{10}","ope":5,"nor":1,"tra":1}}},"274":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,50}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,30})?\\bload_file\\s+\/.{3,15}\/\\w","ope":5,"nor":1,"tra":1}}},"275":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,50}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,30})?\\bdelete\\b.{1,100}\\bfrom\\b.{1,100}\\bwhere\\b.{1,100}(?:=|null)","ope":5,"nor":1,"tra":1}}},"276":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,50}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,30})?\\bset\\s+password\\b(?:\\s+for\\s.{1,38}@.{1,60}=|\\s*=.+?\\bwhere\\s+user\\s*=)","ope":5,"nor":1,"tra":1}}},"277":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i)(?:\\b|\\d)insert\\b.+?(?:\\b|\\d)into\\b.{1,150}(?:\\b|\\d)values\\b.*?\\(.+?\\)","ope":5,"nor":1}}},"278":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,50}(?:(?:\\b(?:and|or|union)\\b|\\|\\||&&).{0,30})?\\bupdate\\s.{1,100}\\bset\\s.{1,50}=.","ope":5,"nor":1,"tra":1}}},"279":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\bgroup\\s+\\bby\\s.{1,200}\\bhaving\\s.{1,50}(?:[!<]?=|=>?|[<>])","ope":5,"nor":1,"tra":1}}},"280":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,10}\\border\\s+by\\s+\\d","ope":5,"nor":1,"tra":1}}},"281":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,10}\\band\\s+extractvalue\\s+\\w","ope":5,"nor":1,"tra":1}}},"282":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\bbenchmark\\s+\\d{5,10}\\s+[a-z]{2}","ope":5,"nor":1,"tra":1}}},"283":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\bfloor\\s+rand\\s+(?:\\d+\\s*)?\\*\\s*\\d+","ope":5,"nor":1,"tra":1}}},"284":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"\\bcase\\b.+?\\bwhen\\b.+?\\bthen\\b","ope":5,"nor":1,"tra":1}}},"285":{"why":"SQL injection","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"^.{0,100}\\s(?:pg_)?sleep\\s\\d+","ope":5,"nor":1,"tra":1}}},"286":{"why":"SQL injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i)\\d\\s+procedure\\s+analyse\\b","ope":5,"nor":1}}},"287":{"why":"SQL injection","lev":2,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"waitfor\\s+delay\\s*\\d+(?:\\.\\d+)?:\\d+(?:\\.\\d+)?:\\d+(?:\\.\\d+)?","ope":5,"nor":1,"tra":1}}},"300":{"why":"Leading quote","lev":2,"ena":1,"cha":{"1":{"whe":"GET","wha":"^'","ope":5,"nor":1}}},"301":{"why":"Potential reflected file download attempt","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI","wha":"(?i)^[^?]*\\.(?:bat|cmd)(?:\\W|$)","ope":5,"nor":1}}},"302":{"why":"PHP variable","lev":2,"ena":1,"cha":{"1":{"whe":"QUERY_STRING|PATH_INFO","wha":"\\bHTTP_RAW_POST_DATA|HTTP_(?:POS|GE)T_VARS\\b","ope":5,"nor":1}}},"303":{"why":"phpinfo.php access","lev":1,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"phpinfo.php","ope":4}}},"304":{"why":"Malformed Host header","lev":2,"ena":1,"cha":{"1":{"whe":"HTTP_HOST","wha":"[^-a-zA-Z0-9._:\\[\\]]","ope":5}}},"305":{"why":"PHP handler obfuscation","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"[^\/]\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b\\.","ope":5}}},"306":{"why":"Bogus user-agent signature","lev":1,"ena":1,"cha":{"1":{"whe":"SERVER:HTTP_USER_AGENT","wha":"\\b(?:compatible; MSIE [1-6]|(?i)Mozilla\/[0-3])\\.\\d","ope":5}}},"307":{"why":"Excessive user-agent string length (400+ characters)","lev":2,"ena":1,"cha":{"1":{"whe":"HTTP_USER_AGENT","wha":"^.{500}","ope":5}}},"308":{"why":"Suspicious multibyte character","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"[\\xaf\\xbf]\\x27","ope":5,"nor":1}}},"309":{"why":"PHP predefined variables","lev":2,"ena":1,"cha":{"1":{"whe":"QUERY_STRING|PATH_INFO|COOKIE|SERVER:HTTP_USER_AGENT|HTTP_REFERER","wha":"\\b(?:\\$?_(COOKIE|ENV|FILES|(?:GE|POS|REQUES)T|SE(RVER|SSION))|HTTP_(?:(?:POST|GET)_VARS|RAW_POST_DATA)|GLOBALS)\\s*[=\\[)]|\\W\\$\\{\\s*['\"]\\w+['\"]","ope":5,"nor":1}}},"310":{"why":"Access to a configuration file","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME|GET","wha":"\\b(?i:(?:conf(?:ig(?:ur(?:e|ation)|\\.inc|_global)?)?)|settings?(?:\\.?inc)?)\\.php$","ope":5}}},"311":{"why":"Large set of Hex characters","lev":2,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"(?i:\\\\x[a-f0-9]{2}){25}","ope":5}}},"312":{"why":"Non-compliant IP","lev":1,"ena":1,"cha":{"1":{"whe":"HTTP_X_FORWARDED_FOR|HTTP_CF_CONNECTING_IP|HTTP_CLIENT_IP|HTTP_FORWARDED_FOR|HTTP_INCAP_CLIENT_IP|HTTP_X_CLUSTER_CLIENT_IP|HTTP_X_FORWARDED|HTTP_X_REAL_IP|HTTP_X_SUCURI_CLIENTIP","wha":"[^.0-9a-fA-F:\\x20,unixkow\\[\\]]","ope":5}}},"313":{"why":"PHP-CGI exploit (CVE-2012-1823)","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING","wha":"^-[bcndfiswzT].{20}","ope":5,"nor":1}}},"315":{"why":"Reverse shell","lev":3,"ena":1,"cha":{"1":{"whe":"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE","wha":">.*?\/[.\/]*dev\/[.\/]*(?:tc|ud)p\/[.\/]*[^\/]{5,255}\/[.\/]*\\d{1,5}\\b","ope":5,"nor":1,"tra":3}}},"316":{"why":"Reverse shell","lev":3,"ena":1,"cha":{"1":{"whe":"GET|HTTP_HOST|SERVER:HTTP_USER_AGENT|QUERY_STRING|SERVER:HTTP_REFERER|HTTP_COOKIE","wha":"\\bnc\\s+(?:\\d+(\\.\\d+){3}\\s+\\d+|-\\w+\\s+(?:\\d+|\/[\\w\/]+\\s+\\d+(\\.\\d+){3}\\s+))","ope":5,"nor":1,"tra":3}}},"317":{"why":"Hidden PHP script","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/\\.[^\/]+\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}}},"318":{"why":"Obfuscated data","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i:\\bchr\\s*\\(\\s*\\d{1,3}\\s*\\).+?){4}","ope":5,"nor":1}}},"319":{"why":"Obfuscated data","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|HTTP_REFERER|HTTP_USER_AGENT|FILES","wha":"(?i)concat|select|database|insert|update|union|table","ope":5,"nor":1,"cap":1},"2":{"wha":"\\bchar\\b\\s(?:\\d{1,3}\\s){3}|(?:\\bchar\\b\\s\\d{1,3}\\s(?:\\|\\||or|&&|and)?\\s?){3}","ope":5,"tra":1,"nor":1}}},"320":{"why":"Obfuscated data","lev":3,"ena":1,"cha":{"1":{"whe":"GET|COOKIE|HTTP_REFERER|HTTP_USER_AGENT","wha":"(?i:\\\\x[a-f0-9]{2}){4}","ope":5}}},"321":{"why":"Adminer script","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/_?adminer(?:(?:-\\d\\.\\d.\\d)(?:-[\\w-]+)?)?\\.php$","ope":5}}},"322":{"why":"Attempt to modify NinjaFirewall settings","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"(^|\\S['\"])nfw_(?:options|rules)\\b","ope":5}}},"323":{"why":"Proxy attempt","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI","wha":"^\/%EF%BB%BFhttps?:\/","ope":5}}},"351":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:nixpasswd","wha":"","ope":7}}},"352":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING","wha":"\\bact=img&img=\\w","ope":5,"nor":1}}},"353":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING","wha":"\\bc=img&name=\\w","ope":5,"nor":1}}},"354":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING","wha":"^image=(?:arrow|file|folder|smiley)$","ope":5,"nor":1}}},"355":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"COOKIE","wha":"\\buname=.+?;\\ssysctl=","ope":5,"nor":1}}},"356":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:sql_passwd","wha":"","ope":7}}},"357":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"POST:nowpath","wha":"","ope":7}}},"358":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"POST:view_writable","wha":"","ope":7}}},"359":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"COOKIE","wha":"phpspypass=","ope":3,"nor":1}}},"360":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"POST:a","wha":"^(?:Bruteforce|Console|Files(?:Man|Tools)|Network|Php|SecInfo|SelfRemove|Sql|StringTools)$","ope":5}}},"361":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"POST:nst_cmd","wha":"","ope":7}}},"362":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"POST:cmd","wha":"^(?:c(?:h_|URL)|db_query|echo\\s\\\\.*|(?:edit|download|save)_file|find(?:_text|\\s.+)|ftp_(?:brute|file_(?:down|up))|mail_file|mk|mysql(?:b|_dump)|php_eval|ps\\s.*|search_text|safe_dir|sym[1-2]|test[1-8]|zend)$","ope":5}}},"363":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"GET:p","wha":"^(?:chmod|cmd|edit|eval|delete|headers|md5|mysql|phpinfo|rename)$","ope":5}}},"364":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"QUERY_STRING","wha":"^act=(?:bind|cmd|encoder|eval|feedback|ftpquickbrute|gofile|ls|mkdir|mkfile|processes|ps_aux|search|security|sql|tools|update|upload)&d=\/","ope":5,"nor":1}}},"365":{"why":"Shell\/backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"SERVER","wha":"\\b(?i)(eval|base64_decode)\\s*\\(.+?\\)","ope":5}}},"500":{"why":"ASCII control characters (1-8 and 14-31)","lev":2,"ena":0,"cha":{"1":{"whe":"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER","wha":"[\\x01-\\x08\\x0e-\\x1f]","ope":5,"nor":1}}},"510":{"why":"DOCUMENT_ROOT variable in HTTP request","lev":2,"ena":0,"cha":{"1":{"whe":"GET|POST|REQUEST_URI","wha":"\/[.\/]*home3\/[.\/]*neriostudios\/[.\/]*agenciacrabli","ope":5,"nor":1,"tra":3}}},"520":{"why":"Data URI scheme or PHP wrappers","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|COOKIE|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER","wha":"^(?i:(?:expect|file|ph(?:ar|p)|zip):\/\/.|.{0,90}\\bdata:(?!image\/(?:jpe?g|png|gif|svg\\+xml)).*?;\\s*base64.*?,)","ope":5,"nor":1}}},"525":{"why":"Serialized PHP object","lev":3,"ena":1,"cha":{"1":{"whe":"GET|POST|SERVER:HTTP_USER_AGENT|SERVER:HTTP_REFERER","wha":"^.{0,25}[;{}]?\\b[OC]:\\d+:\"[a-zA-Z_\\x7f-\\xff][a-zA-Z0-9_\\x7f-\\xff]*\":\\d+:{.*?}","ope":5,"nor":1}}},"531":{"why":"Suspicious bots\/scanners","lev":1,"ena":1,"cha":{"1":{"whe":"HTTP_USER_AGENT","wha":"(?i:acunetix|backdoor|bandit|blackwidow|BOT for JCE|core-project|dts agent|emailmagnet|ex(ploit|tract)|flood|grabber|harvest|httrack|havij|hunter|indy library|LoadTimeBot|mfibot|Microsoft URL Control|Miami Style|morfeus|nessus|NetLyzer|pmafind|scanner|siphon|spbot|sqlmap|survey|teleport|updown_tester|xovibot|zgrap|zmap)","ope":5,"nor":1}}},"540":{"why":"Localhost IP in GET\/POST request","lev":2,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"^(?i:127\\.0\\.0\\.1|localhost|::1)$","ope":5,"nor":1}}},"1007":{"why":"phpMyAdmin hacking attempt","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/scripts\/(?:setup|signon)\\.php","ope":5}}},"1011":{"why":"Unrestricted file access","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/uploadify.php","ope":3}}},"1350":{"why":"Arbitrary File Upload","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/fckeditor\/editor\/filemanager\/","ope":3}}},"1351":{"why":"Unauthorized file access","lev":2,"ena":1,"cha":{"1":{"whe":"GET|POST","wha":"\/wp-config.php$","ope":5,"nor":1}}},"1352":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:wcfm_membership_settings_form|POST:wcfm_settings_form","wha":"<","ope":3,"nor":1},"2":{"whe":"REQUEST:action","wha":"wcfm_ajax_controller","ope":1}}},"1353":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"sif_upload_file","ope":1}}},"1354":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:cwp_rev_product_name","wha":"[<>'\"]","ope":5,"nor":1}}},"1356":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/ImageHoverUltimate\/v1\/","ope":4,"nor":1}},"cpb":"manage_options"},"1357":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"import_widget_data","ope":1}}},"1359":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:ew|ctp|catchids)_switch$","ope":5}}},"1360":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^tinvwl_(ex|im)port_settings$","ope":5}}},"1361":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:tccj-update","wha":"Update","ope":1},"2":{"whe":"POST:tccj-content","wha":"","ope":7}}},"1362":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"wp-export-users","ope":1}}},"1363":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:wpcr3_f1|POST:wpcr3_f2|POST:wpcr3_f3","wha":"\"","ope":3},"2":{"whe":"REQUEST:action","wha":"wpcr3-ajax","ope":1}}},"1364":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wdr_ajax","ope":1},"2":{"whe":"POST:method","wha":"get_price_html","ope":2}}},"1365":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^wp_ajax_try_2020_","ope":5}}},"1366":{"why":"Unauthorized file access","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/wp-admin\/install.php","ope":3}}},"1367":{"why":"WP Vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"rmp_upload_theme_file","ope":1}}},"1368":{"why":"Unauthorized access","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"my_wpc_fetch_authkey","ope":1}}},"1369":{"why":"Invalid path","lev":1,"ena":1,"cha":{"1":{"whe":"POST:snapdir","wha":":\/\/","ope":3,"nor":1}}},"1370":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"c37_wpl_import_template","ope":1}}},"1371":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^update_(?:shipment_status_email_status|enable_late_shipments_email)$","ope":5}},"cpb":"manage_woocommerce"},"1372":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"COOKIE:EWD_URP_Karma_IDs|COOKIE:EWD_URP_Reviewed_Products|COOKIE:njt_gdpr_allow_permissions|COOKIE:usces_cookie|COOKIE:fdm_cart|COOKIE:thimpress_hotel_booking_1","wha":"\\b[OC]:\\d+:\"[a-zA-Z_\\x7f-\\xff][a-zA-Z0-9_\\x7f-\\xff]*\":\\d+:{.*?}","ope":5}}},"1373":{"why":"WP-VCD backdoor","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:password","wha":"","ope":7},"2":{"whe":"REQUEST:action","wha":"^change_(domain|code)$","ope":5}}},"1374":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"theplus_ajax_register","ope":1},"2":{"whe":"REQUEST:tp_user_reg_role","wha":"^(?:subscriber|customer|contributor)$","ope":6}}},"1376":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wpp_feps_image_upload","ope":1},"2":{"whe":"REQUEST:qqfile","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}}},"1377":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"cli_policy_generator","ope":1}}},"1378":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/wp-file-manager\/lib\/","ope":3}}},"1379":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:lastParentId","wha":"","ope":7},"2":{"whe":"POST:orderBy","wha":"\\W","ope":5}}},"1380":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:awdr_switch_plugin_to","wha":"","ope":7}}},"1381":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"download-lp-users","wha":"yes","ope":1}}},"1382":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:page","wha":"wps_pages_page","ope":1},"2":{"whe":"GET:ID","wha":"\\D","ope":5}}},"1383":{"why":"Unauthorized action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:custom_field_user_role","wha":"administrator|editor","ope":5}}},"1384":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:ag_import_action","wha":"","ope":7}}},"1385":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:llms_import","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1386":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:cff_save_settings|rmp_import_menu|admin-dismiss-unsubscribe)$","ope":5}}},"1387":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:eeFileAction","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5,"nor":1}}},"1388":{"why":"jQuery unrestricted file upload","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/server\/php\/index.php","ope":3},"2":{"whe":"FILES:files","wha":"","ope":7}}},"1389":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wpr_delete_snapshot_tables","ope":1}}},"1390":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"atbdp_download_file","ope":1}}},"1391":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"dnd_codedropz_upload_delete","ope":1}}},"1392":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/connector.minimal.php","ope":3}}},"1393":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"plugin_offline_installer","ope":1}},"cpb":"install_plugins"},"1394":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:file|POST:restore_script_url|POST:xcloner_action","wha":"","ope":7},"2":{"whe":"REQUEST:action","wha":"restore_backup","ope":1}}},"1395":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"post_grid_import_xml_layouts","ope":1}}},"1396":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"ait-csv-import-export\/admin\/upload-handler.php","ope":3},"2":{"whe":"FILES:file","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}},"cpb":"unfiltered_upload"},"1397":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"POST:delete_file","wha":"","ope":7}}},"1398":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:uploadFontIcon|kaswaraImportDemo|importShortcodeData|importCf7Styles|deleteFontIcon|kaswaraCustomCode|kaswaraCf7Designer)$","ope":5}}},"1399":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"POST:berocket_aapf_wizard_settings","wha":"","ope":7}}},"1400":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:all_options","wha":"","ope":7}},"cpb":"manage_capabilities"},"1402":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"connector","ope":1},"2":{"whe":"REQUEST:cmd","wha":"","ope":7}}},"1403":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"nxs_snap_aj","ope":1}}},"1404":{"why":"WP backdoor","lev":3,"ena":1,"cha":{"1":{"whe":"SERVER:HTTP_USER_AGENT","wha":"wp_is_mobile","ope":1}}},"1405":{"why":"Unauthorized upload","lev":3,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/js\/swfupload\/js\/upload.php","ope":3}}},"1406":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:wpdeveloper_(?:install|upgrade|activate)_plugin|save_(?:setup_wizard_data|eael_elements_data|settings_with_ajax))$","ope":5}}},"1407":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"upload_chat_file","ope":1},"2":{"whe":"FILES:file","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}},"cpb":"unfiltered_upload"},"1408":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/thrive\/kraken","ope":4,"nor":1}}},"1410":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"slp_change_option","ope":1},"2":{"whe":"RAW","wha":"formdata\\[option_name\\]=user_meta\\[((?!locations_per_page).)","ope":5,"nor":1}}},"1411":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"upload-remote-file","ope":1}}},"1412":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:zip_(ngg_)?upload)$","ope":5},"2":{"whe":"FILES:zipFile","wha":"","ope":7}}},"1413":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:action2","wha":"recover_password2","ope":1},"2":{"whe":"GET:key","wha":"<","ope":3}}},"1414":{"why":"Potential XSS","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"slimtrack","ope":1},"2":{"whe":"REQUEST:pl","wha":"['\"]","ope":5,"nor":1}}},"1415":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"heateor_sss_import_config","ope":1}}},"1416":{"why":"Unauthorized access","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"mmr_files","ope":1}}},"1417":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"hdi_install_demo","ope":1}}},"1418":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/wp-json\/omapp\/v1\/support","ope":4,"nor":1}},"cpb":"manage_options|optin_monster_api_menu_cap"},"1419":{"why":"Unauthenticated file upload","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"epl-tools","ope":1},"2":{"whe":"FILES:epl_import","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1420":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/aioseo\/v1\/htaccess","ope":4,"nor":1}},"cpb":"aioseo_tools_settings"},"1421":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"crellyslider_importSlider","ope":1}}},"1422":{"why":"Unauthorized file edition","lev":3,"ena":1,"cha":{"1":{"whe":"GET:action|POST:action","wha":"^(?:update|edit-theme-plugin-file)$","ope":5},"2":{"whe":"POST:file","wha":"^(?:ninjafirewall|nfwplus)\/","ope":5,"nor":1}}},"1423":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:wcuf_file_name","wha":".php","ope":3}}},"1424":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"do_button_job_later","ope":1}}},"1425":{"why":"Stored XSS","lev":3,"ena":1,"cha":{"1":{"whe":"POST:author","wha":"","ope":7},"2":{"whe":"POST:comment","wha":"<(?i)(?:(?:a|abbr|acronym)\\b.+?title|(?:blockquote|q)\\b.+?cite|del\\b.+?datetime)\\s*=\\s*['\"][^>]+?on[a-z]{3,18}\\s*=\\s*.+?>","ope":5,"nor":1}}},"1426":{"why":"Excessive payload size","lev":2,"ena":1,"cha":{"1":{"whe":"POST:author","wha":"","ope":7},"2":{"whe":"POST:comment","wha":"^(?s).{65000}","ope":5}}},"1427":{"why":"Arbitrary file upload","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:xl_required_files","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1428":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:do_reset_wordpress|GET:ai_reset_wordpress","wha":"","ope":7}}},"1429":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"woosea_save_adwords_conversion_id","ope":1}}},"1430":{"why":"Unauthenticated XSS","lev":3,"ena":1,"cha":{"1":{"whe":"POST:action_rcs","wha":"action_rcs_page_setting_save_post","ope":1}}},"1431":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"qppr_save_quick_redirect","ope":1}}},"1432":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/api\/flutter_user\/register","ope":4,"nor":1},"2":{"whe":"RAW","wha":"\":\"(administrator|editor)\"","ope":5}}},"1433":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/api\/flutter_user\/update_user_profile","ope":4,"nor":1}}},"1434":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"facebook-like-button","ope":1},"2":{"whe":"REQUEST:edit","wha":"1","ope":1}}},"1435":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"save_gallery_data","ope":1},"2":{"whe":"REQUEST:categories","wha":"","ope":7}}},"1436":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"importJSONTable","ope":1}}},"1437":{"why":"Unauthenticated option update","lev":3,"ena":1,"cha":{"1":{"whe":"GET:yp_remote_get","wha":"","ope":7},"2":{"whe":"POST:yp_json_import_data","wha":"","ope":7}}},"1438":{"why":"Unauthorized options update","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"yuzo-related-post","ope":1},"2":{"whe":"POST:save_options","wha":"","ope":7}}},"1439":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"POST:option_page","wha":"^inspire_checkout_fields_(checkboxes|settings)$","ope":5}}},"1440":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:swpsmtp_action|POST:swpsmtp_export_settings|POST:swpsmtp_import_settings","wha":"","ope":7}}},"1441":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"wsal-setup","ope":1}}},"1442":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^((user|coupon|product_(reviews|comments))_csv|woocommerce_(csv|xml)(_order)?)_import_request$","ope":5}}},"1443":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"gmwd_setup","ope":1}}},"1444":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"aj_steps","ope":1}}},"1445":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:swp_debug","wha":"load_options","ope":1},"2":{"whe":"GET:swp_url","wha":"","ope":7}}},"1446":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"SERVER:HTTP_X_WORDABLE_SIGNATURE","wha":"^([^=]+|.*?=\\s*)$","ope":5}}},"1447":{"why":"Unauthorized options change","lev":3,"ena":1,"cha":{"1":{"whe":"POST:wp_db_backup_email_id|POST:wp_db_exclude_table","wha":"","ope":7}}},"1448":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"responsive-ready-sites-","ope":3}}},"1449":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^cfp-(?:new-post|connect)$","ope":5}}},"1450":{"why":"Arbitrary file upload","lev":3,"ena":1,"cha":{"1":{"whe":"FILES","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5},"2":{"whe":"GET:action","wha":"wccs_upload_file_func","ope":1}},"cpb":"unfiltered_upload"},"1451":{"why":"Arbitrary file upload","lev":3,"ena":1,"cha":{"1":{"whe":"FILES","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5},"2":{"whe":"POST:action","wha":"wccs_upload_file_func","ope":1}},"cpb":"unfiltered_upload"},"1452":{"why":"Arbitrary file upload","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wpsc_tickets","ope":1},"2":{"whe":"FILES:file","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}},"cpb":"unfiltered_upload"},"1453":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wfu_ajax_action_ask_server","ope":1},"2":{"whe":"REQUEST:filenames","wha":"\/","ope":3}}},"1455":{"why":"Suspicious shortcode","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"parse-media-shortcode","ope":1},"2":{"whe":"POST:shortcode","wha":"\\W\\w+=(?:\"[^\"]*['<=][^\"]*\"|'[^']*[\"<=][^']*')\\W","ope":5,"nor":1}}},"1456":{"why":"Unauthorized options change","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"save","ope":1},"2":{"whe":"REQUEST:updated","wha":"true","ope":1}}},"1457":{"why":"Unauthorized settings change","lev":3,"ena":1,"cha":{"1":{"whe":"POST:wplc_custom_css|POST:wplc_custom_js","wha":"","ope":7},"2":{"whe":"POST:wplc_save_settings","wha":"","ope":7}}},"1458":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"svx_ajax_factory","ope":1}},"cpb":"manage_woocommerce"},"1459":{"why":"Unauthorized settings change","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"update_zb_fbc_code","ope":1},"2":{"whe":"REQUEST:domain","wha":"[<'\";]","ope":5}}},"1460":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:action","wha":"^(de)?activate_plugin$","ope":5},"2":{"whe":"GET:plugin","wha":"","ope":7}}},"1461":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:wp_advanced_search_file_import","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1462":{"why":"Unauthenticated options change","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^nd_(?:options|travel|rst|learning|donations|booking)_import_settings_php_function$","ope":5}}},"1463":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"companion_disable_popup","ope":1}}},"1464":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:tutor_add_instructor|instructor_approval_action|tutor_option_save|setup_action)$","ope":5}}},"1465":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:action","wha":"lrgawidget_setProfileID","ope":1},"2":{"whe":"POST:property_id","wha":"","ope":7}}},"1466":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:ghazale-sds-submit-field-name|POST:ghazale_sds_edit_field|POST:submit-update-single-entry|POST:sds-submit-upload-csv-file|GET:sds-total-del-form-table|GET:sds-total-del-input-table-and-corresponding-form|GET:sds-delete-field-id|GET:sds-del-data-input-table|GET:sds-del-entry-first-entry-id","wha":"","ope":7}}},"1467":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(epsilon_framework_ajax_action|(welcome_screen|epsilon_dashboard)_ajax_callback)$","ope":5}}},"1468":{"why":"WP vulnerability","lev":1,"ena":1,"cha":{"1":{"whe":"GET:action","wha":"dmm_export","ope":1}}},"1469":{"why":"WP vulnerability","lev":1,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/wp-json\/api\/flutter_user\/apple_login","ope":4,"nor":1},"2":{"whe":"SERVER:REQUEST_METHOD","wha":"GET","ope":1}}},"1470":{"why":"WP vulnerability","lev":1,"ena":1,"cha":{"1":{"whe":"GET:stripe_access_token_test","wha":"","ope":7}}},"1471":{"why":"Unrestricted file access","lev":1,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/readme.html","ope":3}}},"1472":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:SuperSocializerAuth","wha":"LiveJournal","ope":1}}},"1473":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:action","wha":"elementor","ope":1},"2":{"whe":"REQUEST:elementor-mode","wha":"safe","ope":1}}},"1474":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"elementor_ajax","ope":1},"2":{"whe":"REQUEST:actions","wha":"\"enable_(safe_mode|svg_uploads)|pro_assets_manager_custom_icon_upload\"","ope":5}}},"1475":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"sgpb_autosave","ope":1}}},"1476":{"why":"Suspicious payload","lev":3,"ena":1,"cha":{"1":{"whe":"RAW","wha":"(?i:SPY\\s*H4X3R)|\\bwordprestadmin\\b|\\bdevelopfirstline\\.com|\\bdigestcolect\\.com|\\btrackstatisticsss\\.com|\\bbalantfromsun\\.com|\\bwow-robotics\\.xyz","ope":5,"nor":1}}},"1477":{"why":"WP vulnerability","lev":1,"ena":1,"cha":{"1":{"whe":"SERVER:REQUEST_METHOD","wha":"POST","ope":1},"2":{"whe":"REQUEST:gdpr_save_priv_pol_settings","wha":"","ope":7}}},"1478":{"why":"WP vulnerability","lev":1,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wp_gdpr","ope":1},"2":{"whe":"REQUEST:action_switch","wha":"","ope":7}}},"1479":{"why":"Suspicious HTTP_REFERER","lev":3,"ena":1,"cha":{"1":{"whe":"SERVER:HTTP_REFERER","wha":"..\/..\/..","ope":3,"nor":1}}},"1481":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:Action|GET:OTPAction","wha":"^(?:EWD_OTP_AddOrder|EWD_UASP_AddAppointment|UPCP_AddProduct|EWD_URP_ImportReviewsFrom)Spreadsheet$","ope":5}}},"1482":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:actions","wha":"^{\"save_builder\":{\"","ope":5},"2":{"whe":"REQUEST:actions","wha":"\"url\":\"[^\"]*?(?i:javascript)|\"(?:custom)?_attributes\":\"(?:(?![^\\\\]\").)*?\\b(?i)on[a-z]{3,29}\\b","ope":5,"nor":1}}},"1483":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"fruitful_theme_options_action","ope":1}}},"1484":{"why":"Suspicious login","lev":2,"ena":1,"cha":{"1":{"whe":"SCRIPT_NAME","wha":"\/wp-login.php","ope":3},"2":{"whe":"POST:log","wha":"^(server_admin|foxilitrix|system_not_delete_|admin_sweet|AnonymousFox|adminlin|cron-.{40}$)|['\"<>;]","ope":5}}},"1485":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:lp-action","wha":"accept-request","ope":1}}},"1486":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(learnpress_(be_teacher|plugin_install)|accept-to-be-teacher)$","ope":5}}},"1487":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/rankmath\/v1\/updateMeta","ope":4,"nor":1},"2":{"whe":"RAW","wha":"capabilities][administrator]","ope":3}}},"1488":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"export_admin_table","ope":1},"2":{"whe":"REQUEST:filename","wha":"\\.csv$","ope":6}}},"1489":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:foobar","wha":"","ope":7},"2":{"whe":"REQUEST:action","wha":"^TotalSoftPoll_(Clone(?:_Set)?|Del(?:_Set)?|Edit(?:_Q_M|_Ans|_Set)?|Theme_(?:Clone|Edit1?)?)$","ope":5}}},"1490":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"vcv-admin-ajax","ope":1},"2":{"whe":"REQUEST:vcv-action","wha":"settings:save:adminNonce","ope":1}}},"1491":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"vcv-admin-ajax","ope":1},"2":{"whe":"REQUEST:vcv-zip","wha":"<(?i:applet|embed|i?frame(?:set)?|meta|object|script)\\b","exm":"base64_decode|zlib_decode","ope":5}}},"1492":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:page","wha":"vcv-global-css-js","ope":1}}},"1493":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^xoo_aff_(?:save|reset)_settings$","ope":5}}},"1494":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"googlesitekit_proxy_setup","ope":1}}},"1495":{"why":"ThemeREX Addons unauthenticated function injection","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/trx_addons\/v2\/get\/sc_layout","ope":4,"nor":1}}},"1496":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/rankmath\/v1\/updateRedirection","ope":4,"nor":1},"2":{"whe":"REQUEST:redirectionUrl","wha":"","ope":7}}},"1497":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:bbp-forums-role","wha":"bbp_keymaster","ope":1}}},"1498":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"_ning_upload_image","ope":1}},"cpb":"unfiltered_upload"},"1499":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"st_filter_tour_ajax_location","ope":1},"2":{"whe":"GET:id_location","wha":"\\D","ope":5}}},"1500":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"change_klarna_addon_status","ope":1}}},"1501":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"gdlr_lms_cancel_booking","ope":1},"2":{"whe":"POST:id","wha":"\\D","ope":5}}},"1502":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:rm_slug","wha":"rm_user_edit","ope":1}}},"1503":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(rm_save_form_view_sett|set_default_form|import_first|rm_admin_upload_template)$","ope":5}}},"1504":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"qsm_upload_image_fd_question","ope":1},"2":{"whe":"FILES:file","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5}},"cpb":"unfiltered_upload"},"1505":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"qsm_remove_file_fd_question","ope":1},"2":{"whe":"POST:file_url","wha":"^qsmfileupload_","ope":6}}},"1506":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:alg_wc_pif_download_file","wha":"\\.[\\\\\/]","ope":5,"tra":3}}},"1507":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"kaliforms_form_delete_uploaded_file","ope":1}}},"1508":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"kaliforms_update_option_ajax","ope":1}}},"1509":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"uploader","ope":1},"2":{"whe":"FILES:uploadfile","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1510":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"iconset_uploader","ope":1},"2":{"whe":"FILES:uploadfile","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1511":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"FILES","wha":"\\.(?:ph(?:p([34x7]|5\\d?)?|t(ml)?|ar)|html?)\\b","ope":5},"2":{"whe":"REQUEST:action","wha":"wmuUploadFiles","ope":1}},"cpb":"unfiltered_upload"},"1512":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"iva_bh_import_ajax_action","ope":1}}},"1513":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"stm_listing_register","ope":1},"2":{"whe":"RAW","wha":"\"role\":\"(?!user|agency)","ope":5,"nor":1}}},"1514":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI","wha":"\/1\/api\/ulisting-","ope":3,"nor":1},"2":{"whe":"REQUEST_URI","wha":"\/1\/api\/ulisting-(?:builder\/listing-(?:single-layout|type-layout\/(?:save_layout|delete-layout)|item-card-layout|single-page)|user\/(?:search|role\/save)|email|import)","ope":5,"nor":1}}},"1515":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:listing_id|GET:user_id","wha":"\\D","ope":5},"2":{"whe":"REQUEST_URI","wha":"\/1\/api\/ulisting-page-statistics\/listing","ope":5,"nor":1}}},"1516":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"backup_guard_importBackup","ope":1}}},"1517":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:ct-ultimate-gdpr-export|POST:ct-ultimate-gdpr-import|POST:ct-ultimate-gdpr-export-services|POST:ct-ultimate-gdpr-import-services","wha":"","ope":7}}},"1518":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^(?:wpcf7r_migrate_all_forms|wpcf7r_reset_settings|import_from_debug|wpcf7r_extension_update|deactivate_wpcf7r_extension|activate_wpcf7r_extension)$","ope":5}}},"1519":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"ninja_forms_sendwp_remote_install","ope":1}}},"1520":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^kiwi_social_share_[sg]et_option$","ope":5}}},"1521":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:backup-migration","wha":"PROGRESS_LOGS","ope":1}}},"1522":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"superpwa_splashscreen_uploader","ope":1}}},"1523":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST","wha":"\\bpagepath=['\"]?\\.\\.\/\\.\\.\/.","ope":5}}},"1524":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"usces_download_system_information","ope":1}},"cpb":"administrator"},"1525":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:member_action|REQUEST:order_action","wha":"^dl(?:order|product|member)newlist$","ope":5}},"cpb":"administrator"},"1526":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"cn_save_config","ope":1}}},"1527":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:rp_wcdpd_settings|REQUEST:rp_wcdpd_export_settings","wha":"^.","ope":5}},"cpb":"manage_rp_wcdpd"},"1528":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"wmc_bulk_fixed_price","ope":1}},"cpb":"edit_products"},"1529":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"SERVER:REQUEST_METHOD","wha":"POST","ope":1},"2":{"whe":"SCRIPT_NAME","wha":"\/wp-automatic\/process_form.php","ope":3}}},"1530":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:wp_pinterest_automatic","wha":"settings","ope":1}}},"1531":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"upload_file","ope":1},"2":{"whe":"FILES:bfdc641563b7bdb53a7b7fb0e49cf9f1","tmp":"","wha":"","ope":7}}},"1532":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:social_site","wha":"true","ope":1},"2":{"whe":"POST:user_id_social_site","wha":"^.","ope":5}},"cpb":"edit_users"},"1533":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"redux\/v1\/templates\/plugin-install","ope":4,"nor":1}},"cpb":"install_plugins"},"1534":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"jobsearch_job_integrations_settin_save","ope":1}}},"1535":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:jobsearch_allocs_setingsubmit","wha":"1","ope":1}}},"1536":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"GET:import","wha":"","ope":7},"2":{"whe":"GET:page","wha":"301options","ope":1}}},"1537":{"why":"WP vulnerability","lev":2,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/ninja-forms-submissions","ope":4,"nor":1}}},"1538":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"SPDSGVO-integration-matomo","ope":1}}},"1539":{"why":"WP vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"woo_product_pagination_product","ope":1},"2":{"whe":"REQUEST:templateInfo","wha":"..","ope":3}}},"1540":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"duplicator_download","ope":1}}},"1541":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST:action","wha":"^bulk301(?:export|clearlist)$","ope":5}}},"1542":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:301_bulk_redirects","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1543":{"why":"WP vulnerability (CVE-2019-15858)","lev":3,"ena":1,"cha":{"1":{"whe":"FILES:wbcr_inp_import_files","wha":"","ope":7}},"cpb":"unfiltered_upload"},"1544":{"why":"Unauthenticated action","lev":3,"ena":1,"cha":{"1":{"whe":"GET:action","wha":"close","ope":1},"2":{"whe":"GET:post","wha":"^\\d+$","ope":5}}},"1545":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/ShortCodeAddonsUltimate\/v2\/addons_settings","ope":4,"nor":1}},"cpb":"manage_options"},"1546":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"REQUEST_URI|REQUEST:rest_route","wha":"\/oxilabtabsultimate\/v1\/oxi_settings","ope":4,"nor":1}},"cpb":"manage_options"},"1547":{"why":"WP Vulnerability","lev":3,"ena":1,"cha":{"1":{"whe":"POST:php_everywhere_code","wha":"<?php","ope":4,"nor":1}},"cpb":"manage_options"},"999":{"118":1,"123":1,"1369":1,"1422":1}}
:-:
"<?php $bf_enable=2;$bf_type=1;$bf_request='POST';$bf_bantime=5;$bf_attempt=8;$bf_maxtime=15;$bf_xmlrpc=0;$bf_allow_bot=0;$auth_name='';$auth_pass='da39a3ee5e6b4b0d3255bfef95601890afd80709';$auth_msgtxt='QWNjZXNzIHJlc3RyaWN0ZWQ=';$bf_rand='812385';$bf_authlog=0;$captcha_text='VHlwZSB0aGUgY2hhcmFjdGVycyB5b3Ugc2VlIGluIHRoZSBwaWN0dXJlIGJlbG93Og==';$bf_nosig=1; ?>"