Vulnerability · Published Apr 10, 2023 · Assigned by WPScan

CVE-2023-0156All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

Medium 4.9

In plain English

A medium-severity path traversal in All-In-One Security (AIOS) from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 19.9% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)19.9%top 2.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file.

Affected products (as reported)

Vendor	Product	Versions
Unknown	All-In-One Security (AIOS)	0 – before 5.1.5

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

References

https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759 exploit, vdb-entry, technical-description