All-In-One Security (AIOS) – Security and Firewall, f57c9765198dd8a6cc7f39cac9914dece351c437

CVE, Research URL: f57c9765198dd8a6cc7f39cac9914dece351c437
Home page URL: Security reports for All-In-One Security (AIOS) – Security and Firewall
Application: All-In-One Security (AIOS) – Security and Firewall
Published on: Jul 11, 2023
Research Description: All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.0 All In One WP Security 5.1.9 - Plaintext Storage of Credentials The All In One WP Security plugin for WordPress is vulnerable to sensitive information disclosure in version 5.1.9. This is due to insufficient encryption on credentials stored in database logs. This makes it possible for attackers to retrieve the username and password of users that have logged into the site, granted they obtain access to the database which would require successfully exploiting another vulnerability such as SQL injection or use of weak passwords.
Affected versions: max 5.2.0.
Status: vulnerable