Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-4097 EUVD-2022-51467GHSA-79g9-878f-3c34

All In One WP Security & Firewall < 5.0.8 - IP Spoofing

Published Dec 12, 2022 · Updated Apr 14, 2025 · Assigned by WPScan

Description

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).

Affected products

VendorProductAffectedFixed
— All-In-One Security (AIOS) < 5.0.8 5.0.8

References