Shulou(Shulou.com)11/24 Report--

CTOnews.com July 14, All-In-One Security (AIOS) is a popular WordPress page plug-in, currently used by more than 1 million sites around the world.

Image source: PixabayAIOS recently exposed a security vulnerability. The plug-in records user passwords in plain text, and the webmaster can access the database to view and extract these passwords directly.

AIOS today released a security patch that fixes the above security vulnerabilities.

AIOS collects user passwords during the authorization process. According to the developers, the plaintext password was recorded due to a software error in the AIOS 5.1.9 code released in May this year.

Developers released AIOS 5.2.0 this week, which can be installed to fix the problem of writing passwords and delete data previously added to the database.

A representative of the AIOS developer confirmed this: "you must log in with top-level administrator privileges to take advantage of this bug." CTOnews.com Note: information security experts have long discouraged webmasters from storing passwords in clear text.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.