What’s Vulnerable › Products

All-In-One Security (AIOS) vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your All-In-One Security (AIOS) version is affected

Latest All-In-One Security (AIOS) vulnerabilities

• CVE-2026-8438 — All-In-One Security (AIOS) <= 5.4.7 - Unauthenticated Stored Cross-Site Scripting via REST API Request Path (CVSS 7.2)
• CVE-2024-1037 — All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-0157 — All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-0156 — All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal (CVSS 4.9)
• CVE-2022-4346 — All In One WP Security & Firewall < 5.1.3 - Configuration Leak (CVSS 5.3)
• CVE-2022-4097 — All In One WP Security & Firewall < 5.0.8 - IP Spoofing (CVSS 5.3)