Description
Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Saad Iqbal | All In One Login | ≤ 2.4.1 | — |
High · 7.1
CVE-2026-94175
EUVD-2026-114297GHSA-5cm5-2v4g-437w
WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack