CVE-2022-4346 - All In One WP Security & Firewall < 5.1.3

MEDIUM

All In One WP Security & Firewall < 5.1.3 - Configuration Leak

Published Jan 23, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 0.66%

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

All-In-One Security (AIOS)

unaffected

Version	Status	Constraints
0	affected	<5.1.3

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe		exploitvdb-entrytechnical-descriptionThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner WPScan

Published Jan 23, 2023

Updated Apr 2, 2025

Reserved Dec 8, 2022

Updated Apr 2, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a