All-In-One Security (AIOS) – Security and Firewall, 209def1128b75ad6cd7c7ca2ef9e8d3e077c3e42

CVE, Research URL: 209def1128b75ad6cd7c7ca2ef9e8d3e077c3e42
Home page URL: Security reports for All-In-One Security (AIOS) – Security and Firewall
Application: All-In-One Security (AIOS) – Security and Firewall
Published on: Oct 25, 2023
Research Description: All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.5 All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to protection bypass on the login page in all versions up to and including 5.2.4. This makes it possible for unauthenticated attackers to visit the login page in cases where it has been renamed by using URL Encoding to visit wp-login.php.
Affected versions: max 5.2.5.
Status: vulnerable