CVE-2022-4097

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP blocks, rate limiting, brute force protection, and more).

Score

CVSS 3.1 5.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-12-12

Last modified

2025-04-14

Weaknesses

CWE-639

Affected products

• All-in-one Security Aios (Unknown)
• All-in-one Security (Updraftplus)

References

• https://wpscan.com/vulnerability/15819d33-7497-4f7d-bbb8-b3ab147806c4