Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:B3E97A48-1EDD-4AA8-B654-F9B8263714E0
HistoryNov 22, 2022 - 12:00 a.m.

All-In-One Security < 5.1.1 - Bulk Actions via CSRF

2022-11-2200:00:00
wpscan.com
8
all-in-one security
csrf
bulk actions
admins
attackers
manipulation

EPSS

0.001

Percentile

32.3%

JSON

The plugin does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as delete arbitrary blocked IPs) via CSRF attacks

Related

cnvd 1
prion 1
patchstack 1
openvas 1
nvd 1
cvelist 1
cve 1
cnvd
cnvd
WordPress All-In-One Security (AIOS) - Security and Firewall plugin cross-site request forgery vulnerability
2022-11-24 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-22 16:15:00
patchstack
patchstack
WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
2022-11-22 00:00:00
openvas
openvas
WordPress All In One WP Security & Firewall Plugin < 5.1.1 CSRF Vulnerability
2022-11-23 00:00:00
nvd
nvd
CVE-2022-44737
2022-11-22 16:15:11
cvelist
cvelist
CVE-2022-44737 WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
2022-11-22 16:00:10
cve
cve
CVE-2022-44737
2022-11-22 16:15:11

EPSS

0.001

Percentile

32.3%

JSON
Related for WPVDB-ID:B3E97A48-1EDD-4AA8-B654-F9B8263714E0
cnvd1prion1patchstack1openvas1nvd1cvelist1cve1