VendorsTips and Tricks HQall_in_one_wp_security_%5C%26_firewallall versions
Vulnerabilities

Tips and Tricks HQ All In One WP Security & Firewall

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

10CVEs
CVE-2015-9310
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
Published 2019-08-14 · Modified
9.8EPSS 0.019
CVE-2016-10887
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.
Published 2019-08-14 · Modified
9.8EPSS 0.019
CVE-2016-10888
The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.
Published 2019-08-14 · Modified
9.8EPSS 0.019
CVE-2022-44737
WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Published 2022-11-22 · Modified
8.8EPSS 0.003
CVE-2015-9293
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
Published 2019-08-13 · Modified
6.1EPSS 0.009
CVE-2016-10867
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages.
Published 2019-08-13 · Modified
6.1EPSS 0.009
CVE-2015-9294
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
Published 2019-08-13 · Modified
6.1EPSS 0.009
CVE-2016-10866
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.
Published 2019-08-13 · Modified
6.1EPSS 0.009
CVE-2016-10868
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages.
Published 2019-08-13 · Modified
6.1EPSS 0.009
CVE-2021-25102
All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site Scripting
Published 2022-05-02 · Modified
4.7EPSS 0.008