All-In-One Security (AIOS) – Security and Firewall, CVE-2015-0895

CVE, Research URL: CVE-2015-0895
Home page URL: Security reports for All-In-One Security (AIOS) – Security and Firewall
Application: All-In-One Security (AIOS) – Security and Firewall
Published on: Mar 07, 2015
Research Description: Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.
Affected versions: Min -, max 3.9.0.
Status: vulnerable