Understand vulnerabilities. Protect your applications.

Medium 24.09.2026

CVE-2026-96825

All-In-One Security (AIOS) – Security and Firewall <= 5.4.8 - Authenticated (Subscriber+) Security Control Bypass

WordPress

all-in-one-wp-security-and-firewall

High 05.06.2026

CVE-2026-8438

All-In-One Security (AIOS) <= 5.4.7 - Unauthenticated Stored Cross-Site Scripting via REST API Request Path

WordPress

all-in-one-wp-security-and-firewall

Medium 08.02.2024

CVE-2024-30468

All In One WP Security <= 5.2.6 - Cross-Site Request Forgery to IP Blocking

WordPress

all-in-one-wp-security-and-firewall

Medium 06.02.2024

CVE-2024-1037

All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 25.10.2023

CVE-2023-52147

All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding

WordPress

all-in-one-wp-security-and-firewall

Medium 11.07.2023

02066dcd-1f2f-4ed3-b1f4-7ea8711918e8

All In One WP Security 5.1.9 - Plaintext Storage of Credentials

WordPress

all-in-one-wp-security-and-firewall

Medium 20.03.2023

CVE-2023-0157

All-In-One Security (AIOS) <= 5.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 14.02.2023

CVE-2023-0156

All-In-One Security (AIOS) <= 5.1.4 - Authenticated(Admin+) Directory Traversal

WordPress

all-in-one-wp-security-and-firewall

Medium 09.12.2022

CVE-2022-4346

All-In-One Security <= 5.1.2 - Information Disclosure

WordPress

all-in-one-wp-security-and-firewall

High 22.11.2022

CVE-2022-44737

All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery

WordPress

all-in-one-wp-security-and-firewall

Medium 21.11.2022

CVE-2022-4097

All-In-One Security (AIOS) – Security and Firewall <= 5.0.8 - IP Spoofing to Protection Mechanism Bypass

WordPress

all-in-one-wp-security-and-firewall

High 17.11.2022

fae1b795-8939-4229-8f89-fedf6f320ec1

All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery

WordPress

all-in-one-wp-security-and-firewall

Medium 30.09.2022

8ce4be1b-3807-4ded-80a5-30f2f80db89d

All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing

WordPress

all-in-one-wp-security-and-firewall

Medium 11.04.2022

CVE-2021-25102

All In One WP Security & Firewall <= 4.4.10 - Open Redirect and Reflected Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 24.12.2020

CVE-2020-29171

All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 08.09.2020

1f092dae-e298-42e3-b494-fc7b7669b300

All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Critical 14.08.2019

CVE-2016-10887

All In One WP Security & Firewall <= 4.0.8 - SQL Injection

WordPress

all-in-one-wp-security-and-firewall

Medium 11.11.2016

CVE-2016-10866

All In One WP Security & Firewall <= 4.1.9 - Reflected Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 31.07.2016

352a0c8a-22a6-44d9-917c-5fb37569d143

All In One WP Security & Firewall <= 4.1.2 - Captcha Bypass

WordPress

all-in-one-wp-security-and-firewall

Critical 06.04.2016

CVE-2016-10888

All In One WP Security & Firewall <= 4.0.6 - SQL Injection

WordPress

all-in-one-wp-security-and-firewall

Medium 23.02.2016

CVE-2016-10867

All In One WP Security & Firewall <= 4.0.5 - Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 22.02.2016

CVE-2016-10868

All In One WP Security & Firewall <= 4.0.4 - Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 15.08.2015

CVE-2015-9293

All In One WP Security & Firewall <= 3.9.7 - Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall

Medium 20.04.2015

CVE-2015-9294

All In One WP Security & Firewall <= 3.9.4 - Reflected Cross-Site Scripting

WordPress

all-in-one-wp-security-and-firewall