Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: All In One WP Security & Firewall Team Clear all filters
TI-2023-28584 CVE-2023-52147 · GHSA-j2rg-722q-9732

WordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability

Priority LOW 18

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This is…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00322 Published 2024-06-04 No fix listed CWE-200
TI-2024-20194 CVE-2024-30468 · GHSA-qx2q-rhgv-qcr8

Cross-site request forgery in All In One WP Security & Firewall

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in All In One WP Security & Firewall Team All In One WP Security & Firewall.This issue affects All In One WP Security & Firewall: from n/a through 5.2.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2024-03-29 No fix listed CWE-352