Description
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin All-In-One Security (AIOS)-Security and Firewall version 5.1.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 5.1.3 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:CC05F760-983D-4DC1-AFBB-6B4965AA8ABE
https://plugins.svn.wordpress.org/all-in-one-wp-security-and-firewall/trunk/readme.txt
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4289)
Ruby CVE-2018-16396 Vulnerability (CVE-2018-16396)
Apache HTTP Server Other Vulnerability (CVE-2005-1344)
MySQL CVE-2018-3283 Vulnerability (CVE-2018-3283)
WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Scripting (6.4)