All IN One Wordpress Security And Firewall vulnerabilities

Product

All IN One Wordpress Security And Firewall

by Tips And Tricks HQ · last CVE Apr 29, 2024

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 0Low 0

Severity

Exploitation

Watch

Add All IN One Wordpress Security And Firewall to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-33591	7.5	0%	Apr 29	WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability Affected: All versions, or not specified
CVE-2015-0894	–	2%	Mar 7	SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified… Affected: through 3.8.7
CVE-2015-0895	–	1%	Mar 7	Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of… Affected: through 3.8.9
CVE-2014-6242	–	4%	Oct 2	Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL… Affected: through 3.8.2