cve/2022/CVE-2022-4346.md

### [CVE-2022-4346](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4346)
![](https://img.shields.io/static/v1?label=Product&message=All-In-One%20Security%20(AIOS)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%200%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-552%20Files%20or%20Directories%20Accessible%20to%20External%20Parties&color=brighgreen)

### Description

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

### POC

#### Reference
- https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe

#### Github
No PoCs found on GitHub currently.