AI
Product
All IN One WP Security & Firewall
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 6Low 0
Watch
Add All IN One WP Security & Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10888 | 9.8 | Aug 14 | The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues Affected: before 4.0.7 |
| CVE-2016-10887 | 9.8 | Aug 14 | The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues Affected: before 4.0.9 |
| CVE-2015-9310 | 9.8 | Aug 14 | The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues Affected: before 3.9.1 |
| CVE-2022-44737 | 8.8 | Nov 22 | WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities Affected: through 5.1.0 |
| CVE-2016-10867 | 6.1 | Aug 13 | The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages Affected: before 4.0.6 |
| CVE-2016-10866 | 6.1 | Aug 13 | The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues Affected: before 4.2.0 |
| CVE-2016-10868 | 6.1 | Aug 13 | The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages Affected: before 4.0.5 |
| CVE-2015-9294 | 6.1 | Aug 13 | The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances Affected: before 3.9.5 |
| CVE-2015-9293 | 6.1 | Aug 13 | The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature Affected: before 3.9.8 |
| CVE-2021-25102 | 4.7 | May 2 | All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site Scripting Affected: before 4.4.11 |
Showing 10