CVE-2022-44737

🗓️ 22 Nov 2022 16:00:10Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 64 Views

Multiple CSRF vulnerabilities in All-In-One Security (AIOS) plugin <= 5.1.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-44737	22 Nov 202218:13	–	circl
CNNVD	WordPress plugin All-In-One Security (AIOS) – Security and Firewall 跨站请求伪造漏洞	22 Nov 202200:00	–	cnnvd
CNVD	WordPress All-In-One Security (AIOS) - Security and Firewall plugin cross-site request forgery vulnerability	24 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-44737 WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities	22 Nov 202216:00	–	cvelist
EUVD	EUVD-2022-47669	3 Oct 202520:07	–	euvd
NVD	CVE-2022-44737	22 Nov 202216:15	–	nvd
OpenVAS	WordPress All In One WP Security & Firewall Plugin < 5.1.1 CSRF Vulnerability	23 Nov 202200:00	–	openvas
OSV	CVE-2022-44737	22 Nov 202216:15	–	osv
Patchstack	WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities	22 Nov 202200:00	–	patchstack
Prion	Cross site request forgery (csrf)	22 Nov 202216:15	–	prion

NVD

Vulners

Node

tipsandtricks-hq all_in_one_wp_security_&_firewallRange≤5.1.0wordpress

[
  {
    "defaultStatus": "unaffected",
    "product": "All-In-One Security (AIOS) – Security and Firewall (WordPress plugin)",
    "vendor": "All In One WP Security & Firewall Team",
    "versions": [
      {
        "changes": [
          {
            "at": "5.1.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.1.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-wp-security-plugin-5-1-0-multiple-cross-site-request-forgery-csrf-vulnerabilities