CyberSecBulletin

All-In-One Security (AIOS) vulnerabilities

We track 1 vulnerability in All-In-One Security (AIOS) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest All-In-One Security (AIOS) vulnerabilities

  • 7.5 High severity

    Two Factor Authentication: Improper Authentication

    CVE-2026-111739Two Factor Authentication

    The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress plugin before 5.5.0 do not bind the account whose two-factor code is verified to the account being authenticated, allowing an attacker who knows a victim's passw