← Back

Tips And Tricks Hq

tips_and_tricks_hq

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
All In One Wordpress Security And Firewall
all_in_one_wordpress_security_and_firewall
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-0895
1Tips And Tricks Hq
1All In One Wordpress Security And Firewall
May 6, 2026
Mar 7, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete l...Show more
Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.Show less
CVE-2015-0894
1Tips And Tricks Hq
1All In One Wordpress Security And Firewall
May 6, 2026
Mar 7, 2015
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2014-6242
1Tips And Tricks Hq
1All In One Wordpress Security And Firewall
May 6, 2026
Oct 2, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parame...Show more
Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby or (2) order parameter in the aiowpsec page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.Show less