CVE-2022-4346 All In One WP Security & Firewall < 5.1.3 - Configuration Leak

2023-01-2314:31:28

WPScan

www.cve.org

all-in-one wp security

firewall

configuration leak

wordpress plugin

email address

EPSS

0.001

Percentile

40.7%

JSON

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "All-In-One Security (AIOS)",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "5.1.3"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

References

wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe

EPSS

0.001

Percentile

40.7%

JSON

Related for CVELIST:CVE-2022-4346