https://emc2hf.github.io/categories/waf-bypass/ Recent content in WAF Bypass on emc2hf Blog Hugo -- 0.148.2 en @emc2hf Sun, 17 Aug 2025 11:37:48 +0200 https://emc2hf.github.io/blog/2025/08/17/how-i-successfully-bypassed-wordfence-to-exploit-sqli-in-a-clients-wordpress/ Sun, 17 Aug 2025 11:37:48 +0200 https://emc2hf.github.io/blog/2025/08/17/how-i-successfully-bypassed-wordfence-to-exploit-sqli-in-a-clients-wordpress/ <p>This is the journey of how I successfully bypassed Wordfence WAF to exploit a SQL Injection in an updated WordPress and Wordfence. The vulnerability was present in a custom plugin developed for my client by a 3rd party. In this post I will explain how I discovered the vulnerability and how I exploited it, successfully bypassing Wordfence SQLi security measures. All the code used in this post can be found at the end of the post. For obvious reasons I will not share the client&rsquo;s website or vulnerable code, instead I developed a simple lab with <code>Docker</code>.</p>