Lucene search

JrXnmPATCHSTACK:D4FC088A64A5FF3E018806D4A2D8FB85

HistoryApr 11, 2022 - 12:00 a.m.

WordPress All In One WP Security plugin <= 4.4.10 - Authenticated Arbitrary Redirect / Reflected XSS vulnerability

2022-04-1100:00:00

JrXnm

patchstack.com

wordpress

all in one wp security

plugin

authenticated

arbitrary redirect

reflected xss

vulnerability

jrxnm

update

EPSS

0.001

Percentile

40.2%

Authenticated Arbitrary Redirect / Reflected XSS vulnerability discovered by JrXnm in WordPress All In One WP Security plugin (versions <= 4.4.10).

Solution

           Update the WordPress All In One WP Security plugin to the latest available version (at least 4.4.11).

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25102

wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers

wpscan.com/vulnerability/9b8a00a6-622b-4309-bbbf-fe2c7fc9f8b6

EPSS

0.001

Percentile

40.2%

Related for PATCHSTACK:D4FC088A64A5FF3E018806D4A2D8FB85