{"id":"CVE-2023-52147","aliases":["EUVD-2023-56820","GHSA-j2rg-722q-9732"],"status":"published","title":"WordPress All-In-One Security (AIOS) plugin \u003c= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security \u0026 Firewall Team All In One WP Security \u0026 Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security \u0026 Firewall: from n/a through 5.2.4.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00322,"percentile":0.25355,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2024-06-04T12:38:45Z","modified":"2026-06-17T06:42:10Z","products":[{"vendor":"all in one wp security \u0026 firewall team","product":"all in one wp security \u0026 firewall"}],"references":[{"url":"https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall/wordpress-all-in-one-security-aios-plugin-5-2-4-secret-login-page-location-disclosure-on-multisites-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52147"},{"url":"https://github.com/advisories/GHSA-j2rg-722q-9732"}],"sources":{"cve":[{"id":"CVE-2023-52147","title":"WordPress All-In-One Security (AIOS) plugin \u003c= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security \u0026 Firewall Team All In One WP Security \u0026 Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security \u0026 Firewall: from n/a through 5.2.4.","status":"published","published":"2024-06-04T12:38:45.579Z","modified":"2026-04-28T16:09:05.81Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:18.508816Z"}],"euvd":[{"id":"EUVD-2023-56820","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security \u0026 Firewall Team All In One WP Security \u0026 Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security \u0026 Firewall: from n/a through 5.2.4.","status":"published","published":"2024-06-04T12:38:45Z","modified":"2026-04-28T16:09:05Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:24:01.410558Z"}],"ghsa":[{"id":"GHSA-j2rg-722q-9732","title":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP...","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security \u0026 Firewall Team All In One WP Security \u0026 Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security \u0026 Firewall: from n/a through 5.2.4.","status":"published","published":"2024-06-04T15:30:58Z","modified":"2024-06-04T15:30:58Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:57:25.483683Z"}],"nvd":[{"id":"CVE-2023-52147","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in All In One WP Security \u0026 Firewall Team All In One WP Security \u0026 Firewall allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects All In One WP Security \u0026 Firewall: from n/a through 5.2.4.","status":"published","published":"2024-06-04T13:15:50.73Z","modified":"2026-06-17T06:42:10.59Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}