Description
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin All-In-One Security (AIOS)-Security and Firewall version 5.1.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 5.1.3 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:CC05F760-983D-4DC1-AFBB-6B4965AA8ABE
https://plugins.svn.wordpress.org/all-in-one-wp-security-and-firewall/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Search Everything SQL Injection (8.1.6)
WordPress Plugin Slideshow Gallery LITE Multiple Cross-Site Scripting Vulnerabilities (1.6.5)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (5.0.8)
PHP Other Vulnerability (CVE-2006-3017)
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)