All In One Login vulnerabilities
We track 1 vulnerability in All In One Login products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest All In One Login vulnerabilities
- 9.8 Critical severity
All In One Login: Improper Privilege Management
The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own br