We are pleased to announce that a new updated WAF ruleset version 3.47 has been released to production.

Changelog

• Added rule ID: 77316753 - IM360 WAF: WordPress Plugin Audio Record 1.0 - Arbitrary File Upload
• Added rule ID: 77316754 - IM360 WAF: WordPress plugin Valums Uploader - File Upload Vulnerability
• Updated rule ID: 77140916 - WordPress connector.minimal.php File Upload Vulnerability (CVE-2019-9194)
• Updated rule ID: 77211120 - IM360 WAF: Remote File Inclusion Attack
• Updated rule ID: 77211170 - IM360 WAF: Session Fixation: SessionID Parameter Name with Off-Domain Referer
• Updated rule ID: 77316730 - IM360 WAF: WordPress plugin File Manager < 6.9 & Elfinder 2.1.47 - Remote Code Execution
• Updated rule ID: 77142267 - IM360 WAF: Special shell symbol in request
• Updated rule ID: 77316736 - IM360 WAF: Request body parsing error
• Updated rule ID: 77316737 - IM360 WAF: Request body parsing error block