Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: All-In-One Security (AIOS) 5.1.5 Clear all filters
TI-2023-00152 CVE-2023-0157 · GHSA-jqhc-cx3v-qvf6

All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS

Priority MEDIUM 55

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containin…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.32462 Published 2023-04-10 Fixed in 5.1.5 CWE-79
TI-2023-00151 CVE-2023-0156 · GHSA-vx24-mm4v-658f

All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

Priority MEDIUM 56

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list director…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.19921 Published 2023-04-10 Fixed in 5.1.5 CWE-22