CVE-2015-9310 (all_in_one_wp_security_&_firewall)

The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.

CVE-2015-9293 (all_in_one_wp_security_&_firewall)
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature. View Full Alert
CVE-2015-9294 (all_in_one_wp_security_&_firewall)
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances. View Full Alert
CVE-2015-9306
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS. View Full Alert