First published: Wed Aug 14 2019(Updated: )
The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Tipsandtricks-hq All In One Wp Security \& Firewall | <4.0.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2016-10887 is critical.
The all-in-one-wp-security-and-firewall plugin before version 4.0.9 for WordPress is affected by CVE-2016-10887.
The Common Vulnerabilities and Exposures (CVE) ID of this vulnerability is CVE-2016-10887.
To fix CVE-2016-10887, you need to update the all-in-one-wp-security-and-firewall plugin to version 4.0.9 or later.
You can find more information about CVE-2016-10887 at the following link: [https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers)