Vendors / mra13 Records 89 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 20
Exploited now mra13 records in CISA KEV No mra13 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 10 records in All In One Wp Security & Firewall · all components
Priority MEDIUM 46
The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01869 · Published 2019-08-14 · No fix listed CWE-89
Priority MEDIUM 46
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01869 · Published 2019-08-14 · No fix listed CWE-89
Priority MEDIUM 46
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01869 · Published 2019-08-14 · No fix listed CWE-89
Priority LOW 38
Multiple Cross-Site Request Forgery vulnerabilities in All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) <= 5.1.0 on WordPress.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00314 · Published 2022-11-22 · No fix listed CWE-352
Priority LOW 29
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00923 · Published 2019-08-13 · No fix listed CWE-79
Priority LOW 29
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00924 · Published 2019-08-13 · No fix listed CWE-79
Priority LOW 29
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00923 · Published 2019-08-13 · No fix listed CWE-79
Priority LOW 29
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00923 · Published 2019-08-13 · No fix listed CWE-79
Priority LOW 29
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00927 · Published 2019-08-13 · No fix listed CWE-79
Priority LOW 23
The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute,…
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00752 · Published 2022-05-02 · Fixed in 4.4.11 CWE-79
Open these records in search → All records by CVSS severity
5 20 64 0 0
THREATIST.IORead the docs