Vulnerabilities / All In One Login
All In One Login vulnerabilities
Advisories WPSec published for All In One Login. Other sources may list more. Its attack surface: All In One Login on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2365 | All In One Login <= 2.5.0 - Authenticated (Administrator+) Missing Authorization to Network Settings Disclosure | Low 2.7 | 2.5.1 |
| 2026-11-03 | WPSEC-2026-2364 | All In One Login <= 2.5.0 - Authenticated (Subscriber+) Sensitive Information Exposure via 2FA Settings REST Endpoint | Medium 4.3 | 2.5.1 |
License: CC BY 4.0