GCVE - cpe:2.3:a:unknown:all-in-one_security_(aios):*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:all-in-one_security_(aios):*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	All In One Security (Aios) (`8cc3df55-57dd-52f5-b67f-dfc06755b48d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-0157`	vulnerable	2026-06-08 05:52:04.390187	All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will be executed in the context of any administrator visiting this page. Published: 2023-04-10T13:18:06.543Z Updated: 2025-02-11T21:09:07.430Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-0156`	vulnerable	2026-06-08 05:52:04.389106	All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file. Published: 2023-04-10T13:17:59.914Z Updated: 2025-02-11T15:08:29.605Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-4346`	vulnerable	2026-06-08 05:51:37.309219	All In One WP Security & Firewall < 5.1.3 - Configuration Leak The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address. Published: 2023-01-23T14:31:28.361Z Updated: 2025-04-02T15:52:32.288Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-4097`	vulnerable	2026-06-08 05:51:36.715594	All In One WP Security & Firewall < 5.0.8 - IP Spoofing The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more). Published: 2022-12-12T17:54:35.126Z Updated: 2025-04-14T18:38:47.786Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.