)),

[2500] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2501] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'submission_report', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2502] Fix | Delete

)),

[2503] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2504] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nf_hidden_fields', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2505] Fix | Delete

)),

[2506] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2507] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2508] Fix | Delete

))))));

[2509] Fix | Delete

$this->rules[291] = wfWAFRule::create($this, 291, NULL, 'priv-esc', '100', 'Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'form_id'), array (

[2510] Fix | Delete

)),

[2511] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'form_id'), array (

[2512] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'role'), array (

[2513] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'notMatch', '#^um_#i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'role'), array (

[2514] Fix | Delete

))))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'wp_capabilities'), array (

[2515] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'identical', '', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'wp_capabilities'), array (

[2516] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'wp_user_level'), array (

[2517] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2518] Fix | Delete

))))));

[2519] Fix | Delete

$this->rules[294] = wfWAFRule::create($this, 294, NULL, 'obji', '100', 'WordPress Core < 5.5.3 - PHP Object Injection Gadget', 1, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'matchCount', '/(^|;|{|})C:+?\\+*[0-9]+:"\\\\?Requests_Utility_FilteredIterator"/i', array(wfWAFRuleComparisonSubject::create($this, 'request.headers', array (

[2520] Fix | Delete

)),

[2521] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.cookies', array (

[2522] Fix | Delete

)),

[2523] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2524] Fix | Delete

)),

[2525] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.queryString', array (

[2526] Fix | Delete

))))));

[2527] Fix | Delete

$this->rules[295] = wfWAFRule::create($this, 295, NULL, 'xss', '100', 'WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables', 1, 'blockXSS', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#(?:%2f|/)(?:%77|%57|w)(?:%70|%50|p)(?:%2d|-)(?:%61|%41|a)(?:%64|%44|d)(?:%6d|%4d|m)(?:%69|%49|i)(?:%6e|%4e|n)(?:%2f|/).*(?:%2f|/)(?:%77|%57|w)(?:%70|%50|p)(?:%2d|-)(?:%61|%41|a)(?:%64|%44|d)(?:%6d|%4d|m)(?:%69|%49|i)(?:%6e|%4e|n)(?:%2f|/).*%27#i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2528] Fix | Delete

))))));

[2529] Fix | Delete

$this->rules[303] = wfWAFRule::create($this, 303, NULL, 'file_upload', '100', 'ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2530] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'lp_cc_addons_actions', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2531] Fix | Delete

)),

[2532] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2533] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_lp_cc_addons_actions', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2534] Fix | Delete

)),

[2535] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2536] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2537] Fix | Delete

))))));

[2538] Fix | Delete

$this->rules[305] = wfWAFRule::create($this, 305, NULL, 'lfi', '100', 'WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/^\\/(?:\\.\\/)*(?:var|home|usr|mnt|media|etc|tmp|dev|proc)\\//i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_thumbnails', 'template'), array (

[2539] Fix | Delete

)),

[2540] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_imagebrowser', 'template'), array (

[2541] Fix | Delete

)),

[2542] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_singlepic', 'template'), array (

[2543] Fix | Delete

)),

[2544] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_compact_album', 'template'), array (

[2545] Fix | Delete

)),

[2546] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_extended_album', 'template'), array (

[2547] Fix | Delete

)),

[2548] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_thumbnails', 'display_view'), array (

[2549] Fix | Delete

)),

[2550] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_imagebrowser', 'display_view'), array (

[2551] Fix | Delete

)),

[2552] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_singlepic', 'display_view'), array (

[2553] Fix | Delete

)),

[2554] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_compact_album', 'display_view'), array (

[2555] Fix | Delete

)),

[2556] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_extended_album', 'display_view'), array (

[2557] Fix | Delete

)),

[2558] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_slideshow', 'display_view'), array (

[2559] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/(^|\\/|\\\\)\\.\\.(\\\\|\\/)/', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_thumbnails', 'template'), array (

[2560] Fix | Delete

)),

[2561] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_imagebrowser', 'template'), array (

[2562] Fix | Delete

)),

[2563] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_singlepic', 'template'), array (

[2564] Fix | Delete

)),

[2565] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_compact_album', 'template'), array (

[2566] Fix | Delete

)),

[2567] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'photocrati-nextgen_basic_extended_album', 'template'), array (

[2568] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'lengthLessThan', '1', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'nonce'), array (

[2569] Fix | Delete

))))));

[2570] Fix | Delete

$this->rules[308] = wfWAFRule::create($this, 308, NULL, 'priv-esc', '100', 'Tutor LMS – eLearning and online course solution <= 1.7.6 - Unprotected AJAX including Privilege Escalation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2571] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'tutor_add_instructor', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2572] Fix | Delete

)),

[2573] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2574] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'instructor_approval_action', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2575] Fix | Delete

)),

[2576] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2577] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'setup_action', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2578] Fix | Delete

)),

[2579] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2580] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'addon_enable_disable', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2581] Fix | Delete

)),

[2582] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2583] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2584] Fix | Delete

))))));

[2585] Fix | Delete

$this->rules[310] = wfWAFRule::create($this, 310, NULL, 'file_upload', '100', 'Responsive Menu 4.0 - 4.0.3 - Authenticated Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-post\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2586] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'rmp_upload_theme_file', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2587] Fix | Delete

)),

[2588] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2589] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2590] Fix | Delete

))))));

[2591] Fix | Delete

$this->rules[313] = wfWAFRule::create($this, 313, NULL, 'obji', '100', 'Meta pixel for WordPress <= 2.2.2 - PHP Object Injection', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'versionLessThan', '3.0.0', array(wfWAFRuleComparisonSubject::create($this, array('wordpress.plugins', 'official-facebook-pixel'), array (

[2592] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#wp\\-admin/+admin\\-post.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2593] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'wp_async_send_server_events', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2594] Fix | Delete

)),

[2595] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2596] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_wp_async_send_server_events', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2597] Fix | Delete

)),

[2598] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2599] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '/(^|;|{|})O:+?\\+*[0-9]+:(?!"(?:stdClass)")/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'event_data'), array (

[2600] Fix | Delete

0 =>

[2601] Fix | Delete

array (

[2602] Fix | Delete

0 => 'base64decode',

[2603] Fix | Delete

),

[2604] Fix | Delete

)),

[2605] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'event_data'), array (

[2606] Fix | Delete

0 =>

[2607] Fix | Delete

array (

[2608] Fix | Delete

0 => 'base64decode',

[2609] Fix | Delete

),

[2610] Fix | Delete

))))));

[2611] Fix | Delete

$this->rules[314] = wfWAFRule::create($this, 314, NULL, 'file_upload', '100', 'WooCommerce Upload Files <= 59.3 - Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'wcuf_file_chunk_upload', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2612] Fix | Delete

)),

[2613] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2614] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_wcuf_file_chunk_upload', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2615] Fix | Delete

)),

[2616] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2617] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#(?:\\.php|\\.\\.\\/|\\.jsp|\\.vbs|\\.exe|\\.bat|\\.php5|\\.pht|\\.phtml|\\.shtml|\\.asa|\\.cer|\\.asax|\\.swf|\\.xap|;|\\.asp|\\.aspx|\\*|<|>|::)#i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'wcuf_file_name'), array (

[2618] Fix | Delete

)),

[2619] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'wcuf_upload_field_name'), array (

[2620] Fix | Delete

)),

[2621] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'wcuf_current_upload_session_id'), array (

[2622] Fix | Delete

))))));

[2623] Fix | Delete

$this->rules[317] = wfWAFRule::create($this, 317, NULL, 'xss', '100', 'FV Flowplayer Video Player <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2624] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'fv_player_db_save', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2625] Fix | Delete

)),

[2626] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2627] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2628] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'editor', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2629] Fix | Delete

))))));

[2630] Fix | Delete

$this->rules[318] = wfWAFRule::create($this, 318, NULL, 'redirect', '100', 'Ninja Forms Contact Form <= 3.4.33 - Administrator Open Redirect', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2631] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'nf_oauth_connect', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2632] Fix | Delete

)),

[2633] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2634] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'redirect'), array (

[2635] Fix | Delete

)),

[2636] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'redirect'), array (

[2637] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'notMatch', '#^https:\\/\\/my.ninjaforms.com\\/#', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'redirect'), array (

[2638] Fix | Delete

))))));

[2639] Fix | Delete

$this->rules[319] = wfWAFRule::create($this, 319, NULL, 'auth-bypass', '100', 'Ninja Forms Contact Form <= 3.4.33 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2640] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'ninja_forms_sendwp_remote_install', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2641] Fix | Delete

)),

[2642] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2643] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2644] Fix | Delete

))))));

[2645] Fix | Delete

$this->rules[320] = wfWAFRule::create($this, 320, NULL, 'auth-bypass', '100', 'Ninja Forms <= 3.4.34 - Authenticated OAuth Connection Key Disclosure', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2646] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'nf_oauth', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2647] Fix | Delete

)),

[2648] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2649] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2650] Fix | Delete

))))));

[2651] Fix | Delete

$this->rules[321] = wfWAFRule::create($this, 321, NULL, 'xss', '100', 'Autoptimize Cross-Site Scripting Bypass', 0, 'blockXSS', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'versionGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('wordpress.plugins', 'autoptimize'), array (

[2652] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#j[\\savscript]+<\\!--[\\s\\S]*?-->[\\savscript]*:|"[a-z\\s\\:\\-]+<\\!--[\\s\\S]*?-->[a-z\\s\\:\\-]+=\\s*"|<<\\!--|<[^dp\\s\\+][^>]*<\\!--#ix', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2653] Fix | Delete

)),

[2654] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.queryString', array (

[2655] Fix | Delete

))))));

[2656] Fix | Delete

$this->rules[323] = wfWAFRule::create($this, 323, NULL, 'auth-bypass', '100', 'Popup Builder <= 3.72 Missing Authorization on AJAX actions', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'sgpb_subscribers_delete', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2657] Fix | Delete

)),

[2658] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2659] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'sgpb_add_subscribers', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2660] Fix | Delete

)),

[2661] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2662] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'sgpb_import_subscribers', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2663] Fix | Delete

)),

[2664] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2665] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'sgpb_save_imported_subscribers', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2666] Fix | Delete

)),

[2667] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2668] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'sgpb_send_newsletter', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2669] Fix | Delete

)),

[2670] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2671] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2672] Fix | Delete

))))));

[2673] Fix | Delete

$this->rules[324] = wfWAFRule::create($this, 324, NULL, 'file_upload', '100', 'External Media <= 1.0.33 - Authenticated Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2674] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'upload-remote-file', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2675] Fix | Delete

)),

[2676] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2677] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2678] Fix | Delete

))))));

[2679] Fix | Delete

$this->rules[325] = wfWAFRule::create($this, 325, NULL, 'auth-bypass', '100', 'Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'ct-ultimate-gdpr-export'), array (

[2680] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'ct-ultimate-gdpr-export-services'), array (

[2681] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'ct-ultimate-gdpr-import'), array (

[2682] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'ct-ultimate-gdpr-import-services'), array (

[2683] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2684] Fix | Delete

))))));

[2685] Fix | Delete

$this->rules[329] = wfWAFRule::create($this, 329, NULL, 'bypass', '100', 'Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2686] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'wpcf7r_delete_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2687] Fix | Delete

)),

[2688] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2689] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpcf7r_add_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2690] Fix | Delete

)),

[2691] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2692] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpcf7r_make_api_test', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2693] Fix | Delete

)),

[2694] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2695] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'activate_wpcf7r_extension', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2696] Fix | Delete

)),

[2697] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2698] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'deactivate_wpcf7r_extension', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2699] Fix | Delete

)),

[2700] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2701] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpcf7r_extension_update', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2702] Fix | Delete

)),

[2703] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2704] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpcf7r_reset_settings', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2705] Fix | Delete

)),

[2706] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2707] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2708] Fix | Delete

))))));

[2709] Fix | Delete

$this->rules[328] = wfWAFRule::create($this, 328, NULL, 'bypass', '100', 'Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2710] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'nopriv_wpcf7r_get_nonce', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2711] Fix | Delete

)),

[2712] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2713] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpcf7r_get_nonce', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2714] Fix | Delete

)),

[2715] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2716] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2717] Fix | Delete

))))));

[2718] Fix | Delete

$this->rules[331] = wfWAFRule::create($this, 331, NULL, 'information-disclosure', '100', 'User Profile Picture <= 2.4.0 - Sensitive Information Disclosure', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+mpp[\\/]+v2[\\/]+get_users/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2719] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/mpp[\\/]+v2[\\/]+get_users/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2720] Fix | Delete

)),

[2721] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2722] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2723] Fix | Delete

))))));

[2724] Fix | Delete

$this->rules[333] = wfWAFRule::create($this, 333, NULL, 'file_upload', '100', 'WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2725] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'quadmenu_compiler_save', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2726] Fix | Delete

)),

[2727] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2728] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_quadmenu_compiler_save', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2729] Fix | Delete

)),

[2730] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2731] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2732] Fix | Delete

))))));

[2733] Fix | Delete

$this->rules[335] = wfWAFRule::create($this, 335, NULL, 'xss', '100', 'Elementor <= 3.1.2 Elements Kit Lite/Pro <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2734] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'elementor_ajax', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2735] Fix | Delete

)),

[2736] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2737] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#(?:["_]tag|header_size|title_size)":"(?!(?:div|header|footer|main|article|section|aside|nav|span|p|a|none|h1|h2|h3|h4|h5|h6|null|large|custom|ul|)")#i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'actions'), array (

[2738] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2739] Fix | Delete

))))));

[2740] Fix | Delete

$this->rules[336] = wfWAFRule::create($this, 336, NULL, 'sqli', '100', 'Tutor LMS <= 1.8.3 - SQL Injection via Bypass', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2741] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'tutor_place_rating', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2742] Fix | Delete

)),

[2743] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2744] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'tutor_mark_answer_as_correct', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2745] Fix | Delete

)),

[2746] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2747] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'tutor_quiz_builder_get_question_form', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2748] Fix | Delete

)),

[2749] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2750] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'tutor_quiz_builder_get_answers_by_question', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2751] Fix | Delete

)),

[2752] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2753] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#[\\r\\n\\t<>]#', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2754] Fix | Delete

)),

[2755] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.queryString', array (

[2756] Fix | Delete

))))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'tutor_answering_quiz_question', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'tutor_action'), array (

[2757] Fix | Delete

)),

[2758] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'tutor_action'), array (

[2759] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#[\\r\\n\\t<>]#', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2760] Fix | Delete

)),

[2761] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.queryString', array (

[2762] Fix | Delete

)))))));

[2763] Fix | Delete

$this->rules[338] = wfWAFRule::create($this, 338, NULL, 'sqli', '40', 'SQL Injection in User-Agent String', 0, 'failSQLi', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'matchCount', new wfWAFRuleVariable($this, 'sqliRegex', NULL), array(wfWAFRuleComparisonSubject::create($this, array('request.headers', 'User-Agent'), array (

[2764] Fix | Delete

))))));

[2765] Fix | Delete

$this->rules[341] = wfWAFRule::create($this, 341, NULL, 'information-disclosure', '100', 'Store Locator Plus <= 5.12.3 - Unauthenticated Stored Cross-Site Scripting', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+store-locator-plus[\\/]+v2[\\/]+options[\\/]+all/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2766] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/store-locator-plus[\\/]+v2[\\/]+options[\\/]+all/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2767] Fix | Delete

)),

[2768] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2769] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+store-locator-plus[\\/]+v2[\\/]+options[\\/]+import/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2770] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/store-locator-plus[\\/]+v2[\\/]+options[\\/]+import/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2771] Fix | Delete

)),

[2772] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2773] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2774] Fix | Delete

))))));

[2775] Fix | Delete

$this->rules[343] = wfWAFRule::create($this, 343, NULL, 'auth-bypass', '100', 'Plus Addons for Elementor Page Builder <= 4.1.6 - Authentication Bypass Method #2', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2776] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'theplus_ajax_login', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2777] Fix | Delete

)),

[2778] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2779] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'theplus_google_ajax_register', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2780] Fix | Delete

)),

[2781] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2782] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'email'), array (

[2783] Fix | Delete

)),

[2784] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'email'), array (

[2785] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'identical', '', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'email'), array (

[2786] Fix | Delete

)),

[2787] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'email'), array (

[2788] Fix | Delete

)))))));

[2789] Fix | Delete

$this->rules[344] = wfWAFRule::create($this, 344, NULL, 'obji', '100', 'PHP Object Injection in Cookies', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/(^|;|{|})(?:O|C):\\d+:"(?!stdClass")[^"]+":/', array(wfWAFRuleComparisonSubject::create($this, 'request.cookies', array (

[2790] Fix | Delete

))))));

[2791] Fix | Delete

$this->rules[347] = wfWAFRule::create($this, 347, NULL, 'priv-esc', '100', 'BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+buddypress[\\/]+v1[\\/]+members[\\/]+(?:me|\\d+)/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2792] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/buddypress[\\/]+v1[\\/]+members[\\/]+(?:me|\\d+)/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2793] Fix | Delete

)),

[2794] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2795] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'versionLessThan', '7.2.1', array(wfWAFRuleComparisonSubject::create($this, array('wordpress.plugins', 'buddypress'), array (

[2796] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2797] Fix | Delete

)),

[2798] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.rawBody', array (

[2799] Fix | Delete

))))));

[2800] Fix | Delete

$this->rules[348] = wfWAFRule::create($this, 348, NULL, 'file_upload', '100', 'Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+td[\\/]+v1[\\/]+optin[\\/]+subscription/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2801] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/td[\\/]+v1[\\/]+optin[\\/]+subscription/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2802] Fix | Delete

)),

[2803] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2804] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'identical', '', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'api_key'), array (

[2805] Fix | Delete

)),

[2806] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'api_key'), array (

[2807] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '#api_key":""#i', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2808] Fix | Delete

)),

[2809] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.rawBody', array (

[2810] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '#(?:hook_url|hookUrl)":"\\{#i', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2811] Fix | Delete

)),

[2812] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.rawBody', array (

[2813] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '#[\\{\\}]#', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'hook_url'), array (

[2814] Fix | Delete

)),

[2815] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'hookUrl'), array (

[2816] Fix | Delete

)),

[2817] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'hook_url'), array (

[2818] Fix | Delete

)),

[2819] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'hookUrl'), array (

[2820] Fix | Delete

)))))));

[2821] Fix | Delete

$this->rules[349] = wfWAFRule::create($this, 349, NULL, 'rfd', '100', 'Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/wp-json[\\/]+thrive[\\/]+kraken/i', array(wfWAFRuleComparisonSubject::create($this, 'request.path', array (

[2822] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '/thrive[\\/]+kraken/i', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'rest_route'), array (

[2823] Fix | Delete

)),

[2824] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'rest_route'), array (

[2825] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#^(?![0-9a-f]{32}).#', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'id'), array (

[2826] Fix | Delete

)),

[2827] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'id'), array (

[2828] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'match', '#"id":"(?![0-9a-f]{32})#i', array(wfWAFRuleComparisonSubject::create($this, 'request.body', array (

[2829] Fix | Delete

)),

[2830] Fix | Delete

wfWAFRuleComparisonSubject::create($this, 'request.rawBody', array (

[2831] Fix | Delete

)))))));

[2832] Fix | Delete

$this->rules[351] = wfWAFRule::create($this, 351, NULL, 'auth-bypass', '100', 'Woocommerce Customers Manager <= 26.4 - Authenticated Account Creation and Privilege Escalation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2833] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'upload_csv', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2834] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wccm_export_csv', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2835] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wccm_export_guests_csv', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2836] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2837] Fix | Delete

))))));

[2838] Fix | Delete

$this->rules[352] = wfWAFRule::create($this, 352, NULL, 'file_upload', '100', 'Business Hours Pro <= 5.5.0 - Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2839] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'iva_bh_ajax_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2840] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_iva_bh_ajax_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2841] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'iva_bh_import_ajax_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2842] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_iva_bh_import_ajax_action', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2843] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2844] Fix | Delete

))))));

[2845] Fix | Delete

$this->rules[353] = wfWAFRule::create($this, 353, NULL, 'lfi', '100', 'The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2846] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#"(?:loop_)?svg_image":\\{[^\\}]*"url":"[^"]+\\.(?!svg)\\w+"#', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'actions'), array (

[2847] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'elementor_ajax', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2848] Fix | Delete

)),

[2849] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2850] Fix | Delete

))))));

[2851] Fix | Delete

$this->rules[356] = wfWAFRule::create($this, 356, NULL, 'redirect', '100', 'Simple 301 Redirects 2.0.0 - 2.0.3 - Unauthenticated Redirect Import/Export', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2852] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', '301options', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'page'), array (

[2853] Fix | Delete

)),

[2854] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'page'), array (

[2855] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'export'), array (

[2856] Fix | Delete

)),

[2857] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'export'), array (

[2858] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'lengthGreaterThan', '0', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'import'), array (

[2859] Fix | Delete

)),

[2860] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'import'), array (

[2861] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2862] Fix | Delete

))))));

[2863] Fix | Delete

$this->rules[357] = wfWAFRule::create($this, 357, NULL, 'file_upload', '100', 'Simple 301 Redirects by BetterLinks 2.0.0 - 2.0.1 - Unprotected AJAX Actions', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2864] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'simple301redirects/admin/wildcard', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2865] Fix | Delete

)),

[2866] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2867] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'simple301redirects/admin/install_plugin', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2868] Fix | Delete

)),

[2869] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2870] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'simple301redirects/admin/activate_plugin', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2871] Fix | Delete

)),

[2872] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2873] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'simple301redirects/admin/hide_notice', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2874] Fix | Delete

)),

[2875] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2876] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'simple301redirects/admin/get_import_info', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2877] Fix | Delete

)),

[2878] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2879] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2880] Fix | Delete

))))));

[2881] Fix | Delete

$this->rules[359] = wfWAFRule::create($this, 359, NULL, 'priv-esc', '100', 'Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2882] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'contains', 'eael-login-register', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'actions'), array (

[2883] Fix | Delete

)),

[2884] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'actions'), array (

[2885] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '#register_user_role":"(?!subscriber|customer)[^"]#', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'actions'), array (

[2886] Fix | Delete

)),

[2887] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'actions'), array (

[2888] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'equals', 'elementor_ajax', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2889] Fix | Delete

)),

[2890] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2891] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2892] Fix | Delete

))))));

[2893] Fix | Delete

$this->rules[360] = wfWAFRule::create($this, 360, NULL, 'bypass', '100', 'Essential Addons for Elementor <= 4.6.4 - Missing Authorization', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2894] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'wpdeveloper_install_plugin', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2895] Fix | Delete

)),

[2896] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2897] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'wpdeveloper_activate_plugin', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2898] Fix | Delete

)),

[2899] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2900] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'save_settings_with_ajax', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2901] Fix | Delete

)),

[2902] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2903] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'clear_cache_files_with_ajax', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2904] Fix | Delete

)),

[2905] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2906] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2907] Fix | Delete

))))));

[2908] Fix | Delete

$this->rules[361] = wfWAFRule::create($this, 361, NULL, 'file_upload', '100', 'Kaswara Modern VC Addons <= 3.0.1 - Arbitrary File Upload', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2909] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'contains', 'kaswara', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2910] Fix | Delete

)),

[2911] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2912] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'uploadFontIcon', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2913] Fix | Delete

)),

[2914] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2915] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_uploadFontIcon', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2916] Fix | Delete

)),

[2917] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2918] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'match', '/(\\.zip)($|\\.)/i', array(wfWAFRuleComparisonSubject::create($this, 'request.fileNames', array (

[2919] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2920] Fix | Delete

))))));

[2921] Fix | Delete

$this->rules[362] = wfWAFRule::create($this, 362, NULL, 'bypass', '100', 'Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '#/wp\\-admin/admin\\-ajax\\.php$#i', array(wfWAFRuleComparisonSubject::create($this, 'server.script_filename', array (

[2922] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'contains', 'kaswara', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2923] Fix | Delete

)),

[2924] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2925] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'exportShortcodeData', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2926] Fix | Delete

)),

[2927] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2928] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_exportShortcodeData', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2929] Fix | Delete

)),

[2930] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2931] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'importShortcodeData', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2932] Fix | Delete

)),

[2933] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2934] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_importShortcodeData', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2935] Fix | Delete

)),

[2936] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2937] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'exportCf7Styles', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2938] Fix | Delete

)),

[2939] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2940] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_exportCf7Styles', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2941] Fix | Delete

)),

[2942] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2943] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'importCf7Styles', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2944] Fix | Delete

)),

[2945] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2946] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_importCf7Styles', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2947] Fix | Delete

)),

[2948] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2949] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'deleteFontIcon', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2950] Fix | Delete

)),

[2951] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2952] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'nopriv_deleteFontIcon', array(wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2953] Fix | Delete

)),

[2954] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2955] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2956] Fix | Delete

))))));

[2957] Fix | Delete

$this->rules[364] = wfWAFRule::create($this, 364, NULL, 'auth-bypass', '100', 'WooCommerce Product Filter by WooBeWoo <= 1.4.9 Unprotected AJAXs', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'wpf', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'pl'), array (

[2958] Fix | Delete

)),

[2959] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'pl'), array (

[2960] Fix | Delete

)))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'equals', 'save', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2961] Fix | Delete

)),

[2962] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2963] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'deleteByID', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2964] Fix | Delete

)),

[2965] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2966] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'drawFilterAjax', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2967] Fix | Delete

)),

[2968] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2969] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'removeGroup', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2970] Fix | Delete

)),

[2971] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2972] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'saveGroup', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2973] Fix | Delete

)),

[2974] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2975] Fix | Delete

)))), new wfWAFRuleLogicalOperator('OR'), new wfWAFRuleComparison($this, 'equals', 'createTable', array(wfWAFRuleComparisonSubject::create($this, array('request.queryString', 'action'), array (

[2976] Fix | Delete

)),

[2977] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'action'), array (

[2978] Fix | Delete

))))), new wfWAFRuleLogicalOperator('AND'), new wfWAFRuleComparison($this, 'currentUserIsNot', 'administrator', array(wfWAFRuleComparisonSubject::create($this, 'server.empty', array (

[2979] Fix | Delete

))))));

[2980] Fix | Delete

$this->rules[365] = wfWAFRule::create($this, 365, NULL, 'obji', '100', 'Thrive Plugins < 2021-05-11 Object Injection', 0, 'block', new wfWAFRuleComparisonGroup(new wfWAFRuleComparison($this, 'match', '/(^|;|{|})(?:O|C):\\d+:"(?!stdClass")[^"]+":/', array(wfWAFRuleComparisonSubject::create($this, array('request.body', '__tcb_lg_msg'), array (

[2981] Fix | Delete

0 =>

[2982] Fix | Delete

array (

[2983] Fix | Delete

0 => 'base64decode',

[2984] Fix | Delete

),

[2985] Fix | Delete

)),

[2986] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', '__tcb_lg_fc'), array (

[2987] Fix | Delete

0 =>

[2988] Fix | Delete

array (

[2989] Fix | Delete

0 => 'base64decode',

[2990] Fix | Delete

),

[2991] Fix | Delete

)),

[2992] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'consent_config'), array (

[2993] Fix | Delete

0 =>

[2994] Fix | Delete

array (

[2995] Fix | Delete

0 => 'base64decode',

[2996] Fix | Delete

),

[2997] Fix | Delete

)),

[2998] Fix | Delete

wfWAFRuleComparisonSubject::create($this, array('request.body', 'tve_mapping'), array (

[2999] Fix | Delete