CVE-2020-29171

CVE-2020-29171 is a Cross-site Scripting (XSS) vulnerability in the WordPress plugin Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) up to version 4.4.6. The flaw resides in admin/wp-security-blacklist-menu.php and stems from insufficient input validatio...

PT-2019-7684

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.7 Description The issue is related to multiple SQL injection problems. Recommendations For versions prior to 4.0.7, update to version 4.0.7 or later to resolve the issue...

PT-2019-7683

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.9 Description The issue concerns SQL injection problems. Recommendations For versions prior to 4.0.9, update to version 4.0.9 or later to resolve the issue...

CVE-2015-9310: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues...

CVE-2016-10887: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues...

CVE-2016-10888: Improper Neutralization of Special Elements used in an SQL Command

The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues...

PT-2019-7269

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.1 Description The issue concerns multiple SQL injection problems. Recommendations For versions prior to 3.9.1, update to version 3.9.1 or later to resolve the issue...

PT-2019-7664

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.0.5 Description The issue concerns the all-in-one-wp-security-and-firewall plugin for WordPress, which has a cross-site scripting XSS problem. This problem is found in the blacklis...

PT-2019-7253

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.5 Description The issue concerns a cross-site scripting XSS problem in the add query arg and remove query arg function instances. This could potentially allow attackers to inject...

CVE-2015-9294: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in addqueryarg and removequeryarg function instances...

CVE-2015-9293: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature...

CVE-2016-10866: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues...

CVE-2016-10867: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages...

CVE-2016-10868: Improper Neutralization of Input During Web Page Generation

The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages...

PT-2019-7662

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 4.2.0 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 4.2.0, update to version 4.2.0 or later to resolve the issue...

PT-2019-7252

Name of the Vulnerable Software and Affected Versions all-in-one-wp-security-and-firewall plugin versions prior to 3.9.8 Description The issue concerns a Cross-Site Scripting XSS flaw in the unlock request feature of the plugin. This type of flaw allows attackers to inject malicious scripts into...