6814 matches found
PT-2019-7684
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.7 Description The issue is related to multiple SQL injection problems. Recommendations For versions prior to 4.0.7, update to version 4.0.7 or later to resolve the issue...
CVE-2015-9310: Improper Neutralization of Special Elements used in an SQL Command
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues...
CVE-2016-10887: Improper Neutralization of Special Elements used in an SQL Command
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues...
PT-2019-7683
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.9 Description The issue concerns SQL injection problems. Recommendations For versions prior to 4.0.9, update to version 4.0.9 or later to resolve the issue...
PT-2019-7269
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.1 Description The issue concerns multiple SQL injection problems. Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to resolve the issue...
CVE-2016-10867
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...
PT-2019-7252
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.8 Description The issue concerns a Cross-Site Scripting XSS flaw in the unlock request feature of the plugin. This type of flaw allows attackers to inject malicious scripts into...
PT-2019-7253
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...
PT-2019-7664
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.5 Description The issue concerns the all-in-one-wp-security-and-firewall plugin for WordPress, which has a cross-site scripting XSS problem. This problem is found in the blacklis...
CVE-2016-10867: Improper Neutralization of Input During Web Page Generation
The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...
CVE-2015-9294: Improper Neutralization of Input During Web Page Generation
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in addqueryarg and removequeryarg function instances...
CVE-2015-9293: Improper Neutralization of Input During Web Page Generation
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature...
CVE-2016-10866: Improper Neutralization of Input During Web Page Generation
The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues...
CVE-2016-10868: Improper Neutralization of Input During Web Page Generation
The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages...
PT-2019-7662
Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.2.0 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue...
WordPress Deny All Firewall plugin cross-site request forgery vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in versions of the WordPress Deny All Firewall plugin prior to 1.1.7, which...
CVE-2019-14681
The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=dafsettings&dafremove=true CSRF...
CVE-2019-14681
The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=dafsettings&dafremove=true CSRF...
