WordPress Plugin Vulnerabilities

All In One WP Security And Firewall < 4.0.7 - Multiple SQL Injections

Description

The All In One WP Security & Firewall WordPress plugin was affected by a Multiple SQL Injections security vulnerability.

Affects Plugins

Plugin icon
all-in-one-wp-security-and-firewall
Fixed in 4.0.7

References

CVE
CVE-2016-10888

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
0b8d9c2f-7aec-41ee-b09b-e38398ed3f42

Timeline

Publicly Published
2016-04-06 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-07-16
Title
Pinterest Automatic Pin < 4.19.0 - Authenticated (Subscriber+) SQL Injection
Published
2025-12-14
Title
Accordion Slider PRO < 1.3 - Authenticated (Contributor+) SQL Injection
Published
2022-12-09
Title
Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi
Published
2020-10-21
Title
Simple Download Monitor < 3.8.9 - SQL Injection
Published
2025-03-13
Title
AnalyticsWP < 2.1.0 - Unauthenticated SQL Injection