Vulnerabilities > Tipsandtricks HQ > ALL IN ONE WP Security Firewall > High

DATE CVE VULNERABILITY TITLE RISK
2022-11-22 CVE-2022-44737 Cross-Site Request Forgery (CSRF) vulnerability in Tipsandtricks-Hq ALL in ONE WP Security & Firewall
Multiple Cross-Site Request Forgery vulnerabilities in All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) <= 5.1.0 on WordPress.
network
low complexity
tipsandtricks-hq CWE-352
8.8
2019-08-14 CVE-2016-10888 SQL Injection vulnerability in ONE WP Security & Firewall
The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues.
network
low complexity
tipsandtricks-hq CWE-89
7.5
2019-08-14 CVE-2016-10887 SQL Injection vulnerability in ONE WP Security & Firewall
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.
network
low complexity
tipsandtricks-hq CWE-89
7.5
2019-08-14 CVE-2015-9310 SQL Injection vulnerability in ONE WP Security & Firewall
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
network
low complexity
tipsandtricks-hq CWE-89
7.5