All In One WP Security & Firewall < 4.4.4 - CSRF & XSS

Antony Garand of Sucuri discovered that multiple WordPress plugins were vulnerable to Cross-Site Scripting (XSS) within the admin panel, which could be exploited by using s Cross-Site Request Forgery (CSRF) attack.

The vulnerability affecting the All In One WP Security & Firewall plugin required the victim to be running an older web browser to be exploited.