Advisories · Technology
All-In-One Security (AIOS).
Every CVE that names All-In-One Security (AIOS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter
- Two Factor Authentication
- All-In-One Security (AIOS)
- Authentication bypass
- CVSS 4.8 Medium
All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS
- All-In-One Security (AIOS)
- CVSS 4.9 Medium
All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal
- All-In-One Security (AIOS)
- Path traversal
- CVSS 5.3 Medium
All In One WP Security & Firewall < 5.1.3 - Configuration Leak
- All-In-One Security (AIOS)
- CVSS 5.3 Medium
All In One WP Security & Firewall < 5.0.8 - IP Spoofing
- All-In-One Security (AIOS)