wp_all_in_one_wp_security_and_firewall_fpd All In One WP Security & Firewall - Full Path Disclosure · CloudMap

低危wp_all_in_one_wp_security_and_firewall_fpd

All In One WP Security & Firewall - Full Path Disclosure

披露于 2026/01/14 · 更新于 2026/01/14

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

All In One WP Security & Firewall WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation.

影响产品

wp-pluginall-in-one-wp-security-and-firewall查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

wordpress.orghttps://wordpress.org/plugins/all-in-one-wp-security-and-firewall/↗

RELATED INTELLIGENCE

同产品关联漏洞

与 all-in-one-wp-security-and-firewall 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
wp_security_open_redirect WordPress All-in-One Security <=4.4.1 - Open Redirect all-in-one-wp-security-and-firewall	中危	6.1	—	PoCEXP	2023/10/20