JVN#30832515: All In One WP Security & Firewall vulnerable to SQL injection

All In One WP Security & Firewall is WordPress plugin that provides security functionality. All In One WP Security & Firewall contains a SQL injection vulnerability (CWE-89).

Impact

If an administrator views a malicious page while logged in, an arbitrary SQL command may be executed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• All In One WP Security & Firewall v3.8.7 and earlier