by David Anderson / Team Updraft 4.7 (1,716 reviews)

All-In-One Security (AIOS) – Security and Firewall

Name: All-In-One Security (AIOS) – Security and Firewall
Rating: 4.7 (1716 reviews)
Author: David Anderson / Team Updraft

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.

All-In-One Security (AIOS) ranks #62 among WordPress.org plugins with 1,000,000+ active installations, is #4 of 1,575 in the Authentication category, a 4.7/5 rating from 1,716 reviews, and was last updated Aug 13, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v5.4.9 Current Version v5.4.9

Updated 1 month ago Last Update on 13 Aug, 2026

Refreshed 11 hours ago Last Refreshed on

#4 of 1,575 in Authentication Top 1% by installs Downloads -21.2% this week

View on WordPress.org

Rank

#62

— No change

Active Installs

1M+

-9.8%

KW Avg Position

— No change

Downloads

36.2M

+3,266 today

Support Resolved

72%

— No change

Rating

94%

Review 4.7 out of 5

4.7 (1,716 reviews)

Next Milestone 2M

Total Progress 15.4%

1M+ 2M+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 846,154 more installs to reach 2M+

Rank Changes

Current #62

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.7

1,716 reviews

Overall 94%

1,553 (91%)

53 (3%)

22 (1%)

15 (1%)

73 (4%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

72%

Resolution Rate

Security History

Source: WPVulnerability

44 known vulnerabilities on record · 1 in the last 24 months · checked 1 week ago

Jun 5, 2026

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.4.8

CVE-2026-8438 · Fixed in v5.4.8
Jun 4, 2024

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.5

CVE-2023-52147 · Fixed in v5.2.5
Mar 29, 2024

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.7

CVE-2024-30468 · Fixed in v5.2.7
Feb 8, 2024

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.7

CVE-2024-30468 · Fixed in v5.2.7
Feb 6, 2024

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.6

CVE-2024-1037 · Fixed in v5.2.6
Oct 25, 2023

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.5

CVE-2023-52147 · Fixed in v5.2.5
Jul 12, 2023

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.0

Fixed in v5.2.0
Jul 11, 2023

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.2.0

Fixed in v5.2.0
Apr 10, 2023

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.1.5

CVE-2023-0156 · Fixed in v5.1.5
Mar 20, 2023

All-In-One Security (AIOS) – Security and Firewall [all-in-one-wp-security-and-firewall] < 5.1.5

CVE-2023-0157 · Fixed in v5.1.5

Showing the 10 most recent of 44 records.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 5.4.9
Last Updated: Aug 13, 2026
Requires WP: 5.0+
Tested Up To: 7.1
PHP Version: 5.6 or higher
Author: David Anderson / Team Updraft

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.7
Reviews: 1,716
Support Threads: 18
Resolved: 72%

Keywords

Malware Scanning firewall login security security two factor authentication

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,007

WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

Kadence Security – Password, Two Factor Authentication, and Brute Force Protection

700K+ installs

#87

View all Authentication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to secure their site without needing deep security expertise. It solves brute-force login attacks, spam comments, file/database tampering, and malicious traffic by combining login protection, firewalls, spam prevention, and audit logging.

Two-factor authentication support
Limit login attempts
File change scanner
Firewall rules (.htaccess, PHP, 6G)
Spam IP blocking
Audit log of site events
Scan and fix file permissions
Malware scanning (Premium)

Frequently Asked Questions

Common questions about All-In-One Security (AIOS) – Security and Firewall

Customers of ‘Free’ AIOS can get support from this very webpage. Select ‘Support’ from the tabs above and post a topic. We aim to respond to all support requests within 24 hours during the working week.

Yes. AIOS works smoothly with most popular WordPress plugins.

Yes. WordPress Security is something that evolves over time. We update AIOS with new security features (and fixes if required) on a regular basis so you can be assured that your site will keep benefitting from new security protection techniques for as long as you need them.

No.

The decision is yours to make. ‘Free’ AIOS incorporates a web application firewall, comprehensive login security tools including two-factor authentication and all the latest recommended WordPress security practices and techniques. But if your WordPress site is a business website, if it showcases what you do, or who you are, we generally recommend AIOS Premium. Prices start from as little as $70 for the year.

AIOS Premium scans your WordPress website for malware whilst also monitoring your site's response time and uptime, notifying you of any issues within 24 hours, AIOS Premium customers also benefit from hands-on ticketed support via email (rather than via WP Support forums). Additional security tools include Country Blocking, Smart 404 Error Blocking and Advanced Two Factor Authentication. More information is available from our All-In-One Security website More information is available from our All-In-One Security website

In the web shop, purchase your preferred subscription. After completing the purchase, you will be emailed a link to download the plugin. You can also access the link through your "My Account" page. After downloading the zip file, install and activate the plugin through WP Admin->Plugins->Add New->Upload Plugin. The premium extends the free version. Therefore you should keep the free version installed and active. You will also be prompted to enter your AIOS username and password to connect your site to licenses. This will allow the plugin to receive updates.

Yes, you need to have the free version of the plugin installed and activated before installing Premium. Premium plugin is an add-on that requires the free version to be present.

Yes, AIOS Premium is compatible with WordPress multisites. For multisite networks, the protection will apply to the network as a whole, and the dashboard and options will be available on the main site of the WordPress multisite.

There is no 100% guarantee that a security plugin will be able to protect against all attacks, as there is always the possibility of unknown WordPress vulnerabilities or other unexpected factors, and attackers are always seeking to develop new ways around protections. However, All-In-One Security gives good protection against known attack methods, and is under continuous development to monitor and improve protections.