43,771 blogs · 5,580,801 posts Claim your blog

Record · corpus.blog/posts/01a08784-d603-701f-a921-4042c9191f0c

CVE-2026-8438: All-In-One Security Unauthenticated Stored XSS (CVSS 7.2)

hurayraiit.com · published 23 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 11
Words captured: 1,866

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

wordpress.org

https://www.cve.org/CVERecord?id=CVE-2026-8438

cve.org

https://downloads.wordpress.org/plugin/all-in-one-wp-security-and-firewall.5.4.7.zip

downloads.wordpress.org

https://downloads.wordpress.org/plugin/all-in-one-wp-security-and-firewall.5.4.8.zip

downloads.wordpress.org

https://www.wordfence.com/threat-intel/vulnerabilities/researchers/dmitrii

wordfence.com

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/all-in-one-wp-security-and-firewall/all-in-one-security-aios-547-unauthenticated-stored-cross-site-scripting-via-rest-api-request-path

wordfence.com

https://plugins.trac.wordpress.org/changeset/3558989/

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/tags/5.4.6/admin/wp-security-list-debug.php

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/tags/5.4.6/classes/wp-security-utility.php

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/tags/5.4.6/classes/wp-security-general-init-tasks.php

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/tags/5.4.6/classes/wp-security-debug-logger.php

plugins.trac.wordpress.org