WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in All-In-One Security (AIOS) – Security and Firewall

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.

23Reported vulnerabilities
9.8Highest CVSS score
5.4.9Latest version
1,000,000+Active installs

What to do now

Update All-In-One Security (AIOS) – Security and Firewall to 5.4.8 or later. 23 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2014-6242 Medium 6.5 4.2% 3.8.2 and earlier 3.8.3 October 2, 2014
CVE-2016-10888 Critical 9.8 1.9% Before 4.0.7 4.0.7 August 14, 2019
CVE-2016-10887 Critical 9.8 1.9% Before 4.0.9 4.0.9 August 14, 2019
CVE-2015-9310 Critical 9.8 1.9% Before 3.9.1 3.9.1 August 14, 2019
CVE-2022-44737 High 8.8 0.3% 5.1.0 and earlier 5.1.1 November 22, 2022
CVE-2021-25102 Medium 4.7 0.7% Before 4.4.11 4.4.11 May 2, 2022
WF-fae1b795-8939-4229-8f89-fedf6f320ec1 High 8.8 — 5.1.0 and earlier 5.1.1 November 17, 2022
CVE-2026-8438 High 7.2 0.5% 0 to 5.4.7 (inclusive) 5.4.8 June 6, 2026
CVE-2015-0895 Medium 6.8 1.1% 3.8.9 and earlier 3.9.0 March 7, 2015
WF-8ce4be1b-3807-4ded-80a5-30f2f80db89d Medium 6.5 — 5.0.0 to 5.0.7 (inclusive) 5.0.8 September 30, 2022
CVE-2020-29171 Medium 6.1 1.5% Before 4.4.6 4.4.6 February 10, 2021
CVE-2015-0894 Medium 6 1.5% 3.8.7 and earlier 3.8.8 March 7, 2015
CVE-2024-1037 Medium 6.1 0.6% Before 5.2.6 5.2.6 February 7, 2024
CVE-2016-10867 Medium 6.1 0.9% Before 4.0.6 4.0.6 August 13, 2019
CVE-2016-10866 Medium 6.1 0.9% Before 4.2.0 4.2.0 August 13, 2019
CVE-2016-10868 Medium 6.1 0.9% Before 4.0.5 4.0.5 August 13, 2019
CVE-2015-9294 Medium 6.1 0.9% Before 3.9.5 3.9.5 August 13, 2019
CVE-2015-9293 Medium 6.1 0.9% Before 3.9.8 3.9.8 August 13, 2019
WF-02066dcd-1f2f-4ed3-b1f4-7ea8711918e8 Medium 5.9 — 5.1.9 to 5.1.9 (inclusive) 5.2.0 July 11, 2023
CVE-2023-52147 Medium 5.3 0.3% Before 5.2.5 5.2.5 October 25, 2023
WF-352a0c8a-22a6-44d9-917c-5fb37569d143 Medium 5.3 — 4.1.2 and earlier 4.1.3 July 31, 2016
WF-1f092dae-e298-42e3-b494-fc7b7669b300 Medium 4.7 — 4.4.3 and earlier 4.4.4 September 8, 2020
CVE-2024-30468 Medium 4.3 0.2% 5.2.6 and earlier 5.2.7 February 8, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.