Read the docs

All In One WP Security & Firewall Team

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

All In One WP Security & Firewall Team records in CISA KEV

No All In One WP Security & Firewall Team vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-20194 CVE-2024-30468 · GHSA-qx2q-rhgv-qcr8

Cross-site request forgery in All In One WP Security & Firewall

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall.This issue affects All In One WP Security & Firewall: from n/a through 5.2.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2024-03-29 No fix listed CWE-352
TI-2023-28584 CVE-2023-52147 · GHSA-j2rg-722q-9732

WordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability

Priority LOW 18

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This is…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00322 Published 2024-06-04 No fix listed CWE-200
Open these records in search →