Information leakage vulnerability in All-In-One Security (AIOS) – Security and Firewall 4.1.2

without verification. The All In One WP Security & Firewall for WordPress is a plugin that is supposed to protect websites that use WordPress from malicious attacks. Unfortunately, it has been found to have a vulnerability that could allow automated login attempts to be successful without having to pass any verification. This means that malicious attackers could potentially access the website without needing any additional information.