WordPress Plugin Vulnerabilities | Page 71 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

all-in-one-wp-migration

Published

2026-09-16

Title

All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure

Slug

all-in-one-wp-migration-box-extension

Published

2023-08-30

Title

Multiple Plugins from ServMask - Unauthenticated Access Token Update

Slug

all-in-one-wp-migration-dropbox-extension

Published

2023-08-30

Title

Multiple Plugins from ServMask - Unauthenticated Access Token Update

Slug

all-in-one-wp-migration-gdrive-extension

Published

2023-08-30

Title

Multiple Plugins from ServMask - Unauthenticated Access Token Update

Slug

all-in-one-wp-migration-onedrive-extension

Published

2023-08-30

Title

Multiple Plugins from ServMask - Unauthenticated Access Token Update

Slug

all-in-one-wp-migration-unlimited-extension

Published

2026-05-05

Title

All-in-One WP Migration Unlimited Extension < 2.84 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download

Slug

all-in-one-wp-migration-unlimited-extension

Published

2026-08-27

Title

All-in-One WP Migration Unlimited Extension < 2.85 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter

Slug

all-in-one-wp-security-and-firewall

Published

2014-09-26

Title

All In One WP Security plugin 3.8.2 - 2xSQL Injections

Slug

all-in-one-wp-security-and-firewall

Published

2015-03-09

Title

All In One WP Security & Firewall <= 3.8.7 - SQL Injection

Slug

all-in-one-wp-security-and-firewall

Published

2015-03-06

Title

All In One WP Security & Firewall < 3.9.0 - CSRF

Slug

all-in-one-wp-security-and-firewall

Published

2015-04-07

Title

All In One WP Security & Firewall <= 3.9.0 - Blind SQL Injection

Slug

all-in-one-wp-security-and-firewall

Published

2015-08-13

Title

All In One WP Security & Firewall <= 3.9.7 - Unauthenticated Cross-Site Scripting (XSS)

Slug

all-in-one-wp-security-and-firewall

Published

2016-07-31

Title

All In One WP Security & Firewall <= 4.1.2 - Multiple vulnerabilities in login CAPTCHA

Slug

all-in-one-wp-security-and-firewall

Published

2016-11-16

Title

All In One WP Security & Firewall 4.1.4-4.1.9 - Authenticated Cross-Site Scripting (XSS)

Slug

all-in-one-wp-security-and-firewall

Published

2016-12-14

Title

All In One WP Security & Firewall <= 4.2.1 - Cross-Site Scripting (XSS)

Slug

all-in-one-wp-security-and-firewall

Published

2016-02-23

Title

All In One WP Security And Firewall < 4.0.6 - XSS

Slug

all-in-one-wp-security-and-firewall

Published

2016-02-22

Title

All In One WP Security And Firewall < 4.0.5 - XSS

Slug

all-in-one-wp-security-and-firewall

Published

2016-05-10

Title

All In One WP Security And Firewall < 4.0.9 - Multiple SQL Injections

Slug

all-in-one-wp-security-and-firewall

Published

2016-04-06

Title

All In One WP Security And Firewall < 4.0.7 - Multiple SQL Injections

Slug

all-in-one-wp-security-and-firewall

Published

2015-04-21

Title

All In One WP Security And Firewall < 3.9.5 - XSS

Slug

all-in-one-wp-security-and-firewall

Published

2019-10-08

Title

All In One WP Security & Firewall <= 4.4.1 - Open Redirect & Hidden Login Page Exposure

Slug

all-in-one-wp-security-and-firewall

Published

2020-09-09

Title

All In One WP Security & Firewall < 4.4.4 - CSRF & XSS

Slug

all-in-one-wp-security-and-firewall

Published

2021-02-10

Title

All In One WP Security & Firewall < 4.4.6 - Authenticated Cross-Site Scripting (XSS)

Slug

all-in-one-wp-security-and-firewall

Published

2022-04-11

Title

All In One WP Security < 4.4.11 - Authenticated Arbitrary Redirect / Reflected XSS

Slug

all-in-one-wp-security-and-firewall

Published

2022-11-21

Title

All In One WP Security & Firewall < 5.0.8 - IP Spoofing