all in one wordpress security and firewall vulnerabilities and fixes

Recent CVEs affecting all in one wordpress security and firewall, with upgrade or downgrade steps. 3 tracked.

Also searched as: allinonewordpresssecurityandfirewall.

all in one wordpress security and firewall has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2015-03-07. Highest priority: CVE-2014-6242 (score 50/100).

• CVE-2015-0895 MEDIUM 6.8 UPGRADE Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 f
• CVE-2015-0894 MEDIUM 6.0 UPGRADE SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows
• CVE-2014-6242 MEDIUM 6.5 UPGRADE Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPr

FAQ

How do I fix all in one wordpress security and firewall vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is all in one wordpress security and firewall being exploited right now?

None of the tracked all in one wordpress security and firewall CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which all in one wordpress security and firewall CVE should I patch first?

CVE-2014-6242 currently ranks highest (50/100): Multiple SQL injection vulnerabilities in the All In One WP Security & Firewall plugin before 3.8.3 for WordPr.

RSS feed for all in one wordpress security and firewall · ← Back to latest CVEs