Launchpad.net

CVE 2016-10866

The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues.

See the CVE page on Mitre.org for more details.

References