Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

All-In-One Security (AIOS) · Version history

All-In-One Security (AIOS) changelog and version history

Latest version
5.5.1
Oct 30, 2026 (9 days ago)
Releases
119
since 2013
In the last year
9
about one every 44 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 201324 releases
  • 201410 releases
  • 20154 releases
  • 20168 releases
  • 20172 releases
  • 20186 releases
  • 20195 releases
  • 20202 releases
  • 20211 release
  • 202219 releases
  • 202311 releases
  • 202413 releases
  • 20256 releases
  • 20268 releases

20268 releases

  1. All-In-One Security (AIOS) 5.5.1Latest

    • FIX: Updated Cloudflare Turnstile key check regex to allow underscores and hyphens.
    • TWEAK: Removed unused lib-central library.
    • TWEAK: Add a Black Friday promo.
  2. All-In-One Security (AIOS) 5.5.0

    • SECURITY: Prevented unauthorised clearing of login lockouts via an empty aiowps_auth_key parameter by requiring a valid nonce and unlock key. Thanks to Filip Kowalski for disclosing this defect.
    • SECURITY: Do not allow WooCommerce to auto-login a user who has TFA active when they perform a password reset. i.e. On previous versions, if using WooCommerce’s “Lost password” facility, someone with access to the email account to which the password reset link was sent could login without providing…
    • SECURITY: On a site where users with lower privilege levels (e.g. subscriber) existed, a lower-privileged user could forge a request and thereby have his own TFA code accepted for someone else’s account. To complete login he would also need to know the password of the account he was logging into. T…
    • FEATURE: Added an Integration settings tab to connect a TeamUpdraft account, providing the authentication used by features that connect to the TeamUpdraft cloud.
    • FEATURE: Added an optional redirect URL to the Rename Login Page feature, so non-logged-in visitors who try to access wp-admin can be sent to a chosen page instead of seeing a “you do not have permission” message.
    • FEATURE: Added audit and debug logging to the firewall.
    • FEATURE: Added a session mechanism to the firewall.
    • FEATURE: Added a pagination dropdown to the audit logs table, allowing users to customize the number of logs displayed per page.
    • FIX: Error log entry for Beginning attempt to port private key encryption over to openssl when unnecessary.
    • FIX: Fixed warning “username” in notify_incorrect_tfa_code_attempts()
    • FIX: If TFA is compulsory for user roles (Premium), it remains required even after downgrading to the free version.
    • FIX: Resolve a PHP E_STRICT deprecation notice
    • FIX: QR code overflow on some resolutions
    • FIX: Two factor user settings block not appearing on new post creation.
    • FIX: Typo in Emergency Code Usage Email Notification Text.
    • FIX: Added confirmation when importing settings from another website for captcha keys and admin email.
    • FIX: Bulk actions row not visible on AJAX-driven list tables (e.g. Logged in users) until the page is manually reloaded.
    • FIX: Deleted users no longer remain visible in the Manual Approval table on WordPress Multisite.
    • FIX: Firewall IP allowlist setting is now included in settings import and export.
    • FIX: Google and Bingbot update failures could overwrite existing bot ranges.
    • FIX: Google reCAPTCHA secret key validation.
    • FIX: Invalid Google reCAPTCHA configuration notice still displaying after disabling CAPTCHA.
    • FIX: Improved InnoDB table migration task to handle upgrade scenarios where automatic table conversion may have been skipped.
    • FIX: Large database tables (over 10 MB) are no longer converted automatically during the InnoDB migration. Manual conversion instructions are displayed instead to help prevent timeouts and database lockups.
    • FIX: List table filters remain visible when no records exist.
    • FIX: Non-WWW wp-login.php canonical redirect exposing the renamed login page.
    • FIX: Potential PHP deprecation notice on PHP 8.1 or later.
    • FIX: Prevented file scans from failing on sites with many installed plugins, and added a live “Downloading Checksums” step so scan progress is clearer.
    • FIX: Search bar remains visible after an AJAX table refresh when no records remain.
    • FIX: Password reset email body could be truncated when REMOTE_ADDR was not a valid IP address.
  3. All-In-One Security (AIOS) 5.4.10

    • SECURITY: Login lockout unlock requests allowed users to unlock another account’s lockout because they were validated based only on the IP address, without checking the user account. Thanks to Ananda Dhakal for disclosing this defect. (This would allow an attacker sharing the same IP address as a u…
  4. All-In-One Security (AIOS) 5.4.9

    • TWEAK: Added a filter that validates POST requests containing UDRPC messages
    • TWEAK: Update the internal common libs package to latest version
  5. All-In-One Security (AIOS) 5.4.8

    • SECURITY: Escaped debug log messages before rendering them in the admin area to prevent a stored XSS vulnerability. Thanks to Dmitrii Ignatyev for disclosing this defect. (This issue required both the debug logging feature and the “Disallow unauthorized REST API requests” setting to be enabled. Und…
    • FEATURE: Add notification method to reporting class to handle mails
    • FEATURE: Added bulk actions to audit log table for blacklisting IPs
    • FIX: Fixed minor bug when setting up TFA with the Onboarding wizard where correct codes are rejected if they are entered more than once.
    • FIX: Log out button/link not working immediately after enabling the rename login feature
    • FIX: On the dashboard page, the login summary for a subsite in a multisite environment incorrectly shows details from the main site.
    • FIX: PHP Warning: Undefined global variable $hook_suffix in class-wp-screen.php when doing ajax table actions.
    • FIX: Properly decode the URI for the ‘advanced character filter’ in order to handle UTF-8 encoded URIs.
    • FIX: Resolve spammer IP address bulk block action not working issue.
    • TWEAK: Introduced .htaccess versioning to update only when needed during AIOS upgrades.
    • TWEAK: Prevent empty CSV download when no audit logs are available for export.
    • TWEAK: Removed jQuery dependency on front end when “Enforce strong password” is enabled
    • TWEAK: The audit log list now includes the executed 2FA WP-CLI command.
    • TWEAK: Update the 404 log table to work with AJAX
    • TWEAK: Update permanent block IP table to work with AJAX
    • TWEAK: Usernames containing URLs in site lockout notification emails are prevented from being auto-linked by mail clients.
  6. All-In-One Security (AIOS) 5.4.7

    • FEATURE: Added a dashboard widget for the top 5 failed login attempts by IP & username and a chart for the number of failed logins over the last 7 days.
    • FIX: WordPress 7.0 admin UI compatibility issues resolved.
    • FIX: Blacklist IP and User Agent firewalls could still be active when turned off.
    • FIX: Table sorting indicators not being shown on WordPress version 6.3 and above.
    • FIX: “Set up IP address detection settings” button not working in setup notice.
    • FIX: Bulk actions and filter missing from tables on mobile resolutions.
    • FIX: Resolved an issue where HTML tags were appearing in the “Rename Login Page” description.
    • FIX: 404 events no longer logged for genuine search bots (e.g. Google/Bing/Yahoo).
    • FIX: Used esc_url_raw() instead of sanitize_url() to resolve the deprecation notice in WordPress 5.0.
    • FIX: Fixed “ReflectionMethod::setAccessible is deprecated as of PHP 8.5” notice.
    • FIX: PHP Notice on WP < 5.5.0 when installing from zip. Undefined property: Plugin_Upgrader::$new_plugin_data
    • FIX: Resolved PHP warning – WPCF7_TagGenerator::add(): Use of tag generator instances older than version 2 is deprecated.
    • TWEAK: Improved password strength tool readability by using zxcvbn library included in WordPress.
    • TWEAK: Various text improvements/updates for better clarity and explanation of features.
    • TWEAK: Updated the Googlebot IP range API URL.
    • TWEAK: Updated the UI for the security points breakdown widget
    • TWEAK: Hash HTTP Authentication password.
    • TWEAK: Add a notice for PHP 7.3 and below end of support.
  7. All-In-One Security (AIOS) 5.4.6

    • FIX: PHP Fatal error: Uncaught Error: Call to a member function get_user_otp_algorithm() on null.
    • FIX: Prevent redirection to settings when AIOS is installed through the onboarding wizard of another plugin.
  8. All-In-One Security (AIOS) 5.4.5

    • FEATURE: Added onboarding wizard on activation of the plugin.
    • FEATURE: Added reports function for UDC.
    • FEATURE: Added additional commands for interoperability with UDC
    • FIX: Logged in users table not correctly tracking multiple sessions.
    • FIX: Removed scrolling from the PHP Rules tab so that Internet Bot settings, WP REST API, and other options are visible.
    • FIX: Exempt UDC commands from brute force prevention.
    • FIX: Login lockout save command for UDC.
    • FIX: Update needed in spam protection command for UDC.
    • FIX: Resolved incorrectly displayed some privileges in the debugging report for database information.
    • TWEAK: Updated the rename login page URL parser to prevent a deprecated error caused by passing null to the rtrim() function.
    • TWEAK: Update scanner command to output last scan time at end of scan for UDC.

20256 releases

  1. All-In-One Security (AIOS) 5.4.4

    • FEATURE: Added new and improved existing modules for UpdraftCentral.
    • FIX: The theme’s custom 404 page does not parse and instead displays the shortcodes for wp-login.php, due to the login page having been renamed.
    • FIX: 404 detection was not working when using a custom 404 template page.
    • FIX: PHP Strict Standards warning for AIOWPSecurity_Base_Tasks::run_for_a_site()
    • FIX: Changed slider control class name from slider to aiowps_slider and updated CSS to prevent conflict with other plugins.
    • FIX: Resolved deprecated error in fputcsv() by providing the required $escape parameter when exporting CSV files.
  2. All-In-One Security (AIOS) 5.4.3

    • FEATURE: Added a feature to enforce the use of strong passwords by users
    • FIX: Bypass Cookie based brute force prevention using AJAX request.
    • FIX: PHP notice – the translation load text domain was called incorrectly.
    • FIX: Resolved call to undefined function disk_total_space in wp-security-debug.php when the hosting provider has disabled this PHP function.
    • FIX: Fatal error when accessing an array query parameter when the login page has been renamed.
    • FIX: Chrome console error where the maths captcha referencing a missing input ‘id’, causing autofill and accessibility issues.
    • FIX: The AIOS translation .pot file does not include TFA labels.
    • FIX: When a user profile is updated, HIBP’s ‘Enforce on profile update’ setting incorrectly triggers an error if the password has not been changed.
    • TWEAK: Added ‘aios_blocked_request_redirect_url’ filter to allow permanently blocked IPs to be redirected to a custom URL rather than 127.0.0.1.
    • TWEAK: Create new AIOS tables and update current AIOS tables to use the InnoDB engine.
    • TWEAK: Moved the ‘6G firewall rules’ feature to the PHP rules tab
    • TWEAK: Moved the ‘Internet bots’ tab into the PHP rules tab
    • TWEAK: Resolved issue where IP detection status was always off for Debugging tab.
    • TWEAK: The Manually approve registered users list should display the error message “You cannot block your own IP address”.
  3. All-In-One Security (AIOS) 5.4.2

    • FEATURE: Ability to enforce checking passwords against the HIBP API when updating user profiles and resetting passwords.
    • FEATURE: Add ability to upgrade all unsafe http calls on the site.
    • FIX: Disabled application password link doesn’t go back to the correct place.
    • FIX: Fatal in the firewall’s message store.
    • FIX: Malformed URLs in User accounts tab.
    • FIX: Users are logged out on Contact Form 7 submit if salt postfix enabled
    • FIX: The ‘Set Password’ page does not load for the user when cookie-based brute-force protection is enabled.
    • FIX: Disallow unauthorized REST request is enabled, but the /wp-json/ shows the rest routes and rest api details
    • TWEAK: Add AJAX message store helper
    • TWEAK: Disable user enumeration error; aios_user_lists_forbidden should return a 403 response code instead of a 500.
    • TWEAK: Rename the WP Admin menu item from ‘WP Security’ to ‘AIOS’ and update the icon to current version.
    • TWEAK: Show AJAX table action response in popup modal
    • TWEAK: Make the plugin more PCP compliant
    • TWEAK: Add a notice for PHP 5.6 end of support.
    • TWEAK: Change url from twitter.com to x.com
    • TWEAK: Made changes to the advert links in the thank you dashboard notice.
  4. All-In-One Security (AIOS) 5.4.1

    • FIX: Call to undefined function AIOWPS\Firewall\sanitize_text_field() fatal error solved.
    • FIX: Resolved an issue where some information in the debugging report email was inconsistent with the information shown at Dashboard > Debugging
    • FIX: Fixed a “call to undefined function wp_strip_tags” error in wp-security-user-login.php
    • FIX: Resolved an issue where raw HTML was displaying in the info box under User Security > User Accounts > User Display Name
    • FIX: Renamed the login page when it was exposed via auth_redirect by other plugins (e.g., Gravity Forms preview)
    • FIX: Fixed an issue where the password reset functionality did not work with the renamed login page feature
    • FIX: Resolved missing translations on the login page after enabling the “Rename login page” feature
    • FIX: Updated the custom login page layout to match the new default WordPress login page design
    • FIX: Fixed the redirection issue occurring after plugin reactivation when the cookie brute force options are saved in the database
    • FIX: Fixed the undefined variable $error in wp-security-user-security-commands.php
    • FIX: Fixed the login lockout request issue
    • FIX: Bulk “Delete selected” action in the Audit Log list was not working
    • FIX: Corrected AIOWSPEC prefixes to AIOWPSEC
    • FIX: The 5G Firewall switch is behaving inversely, enabling it removes .htaccess rules, while disabling adds them.
    • FIX: Fixed the HTML code shown incorrectly on the .htaccess tab
    • TWEAK: Updated links to point to our new website
  5. All-In-One Security (AIOS) 5.4.0

    • FIX: Replaced firewall URI parsers with non-WordPress methods
    • FIX: Resolved PHP 5.6 compatibility issue caused by the ?? operator in 5.3.10
  6. All-In-One Security (AIOS) 5.3.10

    • FEATURE: Added commenting capability to IP whitelists
    • FEATURE: Added diagnostics reporting
    • FEATURE: Added a whitelist and user role-based access limit to the REST API firewall
    • FIX: “Undefined index: path” error when front-end HTTP Authentication is enabled.
    • FIX: Resolved dashboard translation issue where text lacked whitespace and was not properly translated
    • TWEAK: Remove uses of unserialize without restriction of allowed_classes
    • TWEAK: Refactored IP commands class to use response helper
    • TWEAK: Removed WP REST API tab
    • TWEAK: Switched “Critical Feature Status” toggle buttons on the dashboard to a status light system
    • TWEAK: Updated the security strength meter on the dashboard
    • TWEAK: Improved the dashboard widget to display a chart showing the number of logins over the last 7 days
    • TWEAK: Enhanced the maintenance mode switch on the dashboard for consistency with the rest of the plugin
    • TWEAK: Converted Brute Force menu actions to use AJAX
    • TWEAK: Updated seasonal notices

202413 releases

  1. All-In-One Security (AIOS) 5.3.8

    • FIX: Updated the plugin notices to fix translation related fatal errors.
  2. All-In-One Security (AIOS) 5.3.7

    • TWEAK: Change response code for blocked unauthorized REST requests to 403.
    • TWEAK: Temporarily removed firewall logging
  3. All-In-One Security (AIOS) 5.3.6

    • FIX: Resolved an issue with the AIOS_Firewall_Resource class
  4. All-In-One Security (AIOS) 5.3.5

    • FIX: Custom .htaccess rules are now properly escaped, with backslashes removed.
    • FIX: Import settings failed when visitor lockout messages had text alignment or other formatting applied
    • FIX: The audit log filter for event type now works correctly, even when the event type is translated into languages other than English
    • FIX: Resolved text overflow in the blue box on the Settings > WP Version Info page
    • FIX: Some user meta keys were not being removed after uninstalling the plugin
    • FIX: Subsites no longer incorrectly detect the Database Prefix feature as active
    • FIX: Prevented fatal errors from missing firewall resources, replacing them with debug log entries
    • FIX: WordPress database error: BLOB, TEXT, GEOMETRY, or JSON columns cannot have a default value set
    • FIX: The load_plugin_textdomain function is called during the init action, and translations are applied afterward
    • FIX: Renamed login page is now using the WordPress translations
    • TWEAK: Added a filter for PHP firewall rules templates
    • TWEAK: Updated the country code field for audit logs to be based on the IP address (Premium)
    • TWEAK: Improved the text in the 404 detection tab
    • TWEAK: Moved the allowlist into the blacklist tab, and renamed it to “Block & Allow Lists”
    • TWEAK: Moved the WP REST API feature to the PHP rules tab
    • TWEAK: Refactored multiple command classes to use the new AJAX response helper method: Tools, File scan, Files, Settings, and Log commands classes
    • TWEAK: Updated the UI for the .htaccess rules, Captcha settings and file protection tabs
    • TWEAK: Added a note in Settings > Delete plugin settings tab
    • TWEAK: Early calls to get_plugin_data() no longer require translations
    • TWEAK: Refactored the firewall command class to use the response helper method
    • TWEAK: Added a constant AIOS_DISABLE_HTTP_AUTHENTICATION. Define this in your wp-config.php to disable HTTP authentication
  5. All-In-One Security (AIOS) 5.3.4

    • FEATURE: Added a HTTP authentication feature that allows protecting the site with a username/password login.
    • FIX: Added a new method to reset the firewall rules under general settings
    • FIX: Resolved the issue with post cache which caused an issue with comment spam prevention
    • TWEAK: Added a helper class for API requests
    • TWEAK: Removed whitespaces at end of sentences
  6. All-In-One Security (AIOS) 5.3.3

    • FEATURE: Added captcha option for WooCommerce classic guest checkout page.
    • FIX: Fixed responsive layout issues with dashboard notice logo on mobile devices.
    • FIX: Turnstile captcha widget showing multiple times
    • FIX: Solved memory issue for reading larger host system log file
    • FIX: Removed .htaccess options from the Settings menu on Nginx, IIS and unsupported web servers
    • FIX: Resolved UX popup issue and firewall allowlist sanitization
    • FIX: Resolved an issue where bulk table actions were still executed even if the confirmation dialog was canceled.
    • FIX: Added a null check to prevent PHP warnings in firewall rules
    • TWEAK: Ajaxified the actions in the settings, filesystem security, spam prevention and user security menu
    • TWEAK: Added Ajax support to list tables and the audit log
    • TWEAK: Added CAPTCHA field to MemberPress forgot password and registration forms
    • TWEAK: Excluded .htaccess tabs from settings if the server is not supported
    • TWEAK: Updated the firewall rules UI and malware scanner description
    • TWEAK: Tweaked the htaccess backup method to generate the random filename
    • TWEAK: Removed ‘prevent access to default WP files’ from .htaccess and added ‘license.txt’ to deletion list.
  7. All-In-One Security (AIOS) 5.3.2

    • FIX: Bug that allowed subsite admins to delete audit logs of other subsites
    • FIX: Disabled blacklisting on subsites because the PHP-based firewall currently applies to the entire multisite
    • FIX: An issue with getting the google bot ip ranges
    • TWEAK: Added extra protections in place before modifying the .htaccess file
    • TWEAK: Actions in the tools, firewall and scanner menu are now processed via AJAX
    • TWEAK: Trimmed leading and trailing whitespace from inputs in the WHOIS lookup tab
    • TWEAK: Added a confirmation pop-up when users clear records in the Debug Logs table
    • TWEAK: Added captcha support for the MemberPress plugin
    • TWEAK: Improved the UX of the WP REST API options
    • TWEAK: Internal code improvements to improve maintainability
    • TWEAK: Updated the feature manager to improve performance
    • TWEAK: Fixed the issue of blank tables on mobile view
  8. All-In-One Security (AIOS) 5.3.1

    • FEATURE: Added CAPTCHA to password protected pages/posts
    • FIX: Captcha not showing on the BuddyPress registration page
    • FIX: WooCommerce logout issue when the renamed login page and login whitelist features are both enabled
    • FIX: Missing CAPTCHAs when multiple WooCommerce login and register forms are on the same page
    • FIX: Fixed an issue with the 404 detection actions
    • FIX: A UI issue with the 2FA QR code image
    • TWEAK: Added the attribute data-cfasync=”false” to the default captcha url to allow loading on Cloudflare Rocket Loader
    • TWEAK: Purge login lockdown table records after 90 days to restrict size. The AIOS_PURGE_LOGIN_LOCKOUT_RECORDS_AFTER_DAYS constant has been added to change the default.
    • TWEAK: Updated the malware scanner frequency text from daily to weekly
    • TWEAK: Updated the password strength meter UI for the password tool
    • TWEAK: Add a ‘Lock IP’ and ‘Blacklist IP’ link to the IP column of the audit log.
    • TWEAK: Enhance fake Googlebot detection. In the case where gethostbyaddr fails, the firewall will fallback to checking against known Googlebot IP ranges
    • TWEAK: Updated the column header for the “Permanent Blocked IP Addresses” table to be consistent with other tables
    • TWEAK: Prevent warning when DISALLOW_FILE_EDIT has already been defined
    • TWEAK: Fix instances of one translation function being used for multiple sentences
    • TWEAK: Improved the UX during AJAX calls
    • TWEAK: Removed Trash spam comments duplicated description
  9. All-In-One Security (AIOS) 5.3.0

    • FEATURE: Added bulk force logout features for logged in users
    • FIX: An issue with the WooCommerce my account page logout function when the cookie based brute force feature is turned on
    • FIX: Warning undefined array key SCRIPT_FILENAME
    • FIX: Custom redirection after login not working if url contains the redirect_to parameter
    • FIX: List of administrator accounts not showing on the user security page
    • FIX: Issue with cookie based bruteforce prevention solved if salt postfix feature is on.
    • FIX: Fixed country field not showing in the 404 event logs (Premium)
    • FIX: Fixed country field not showing in the smart 404 blocked IP log (Premium)
    • TWEAK: Fixed translation issue not showing as per admin user set language instead of site settings
    • TWEAK: Firewall upgrade changes are applied without access to the admin interface
    • TWEAK: Change the labels for the switches to a more appropriate wording
    • TWEAK: In the file scanner results show the file sizes in a human readable format
    • TWEAK: Updated the default message for attempts to access wp-admin
    • TWEAK: Internal refactor of the update code to improve code clarity.
    • TWEAK: Port the ‘Block fake Googlebots’ feature to the PHP-based firewall
    • TWEAK: Remove requirement for at least one IP for ‘Blacklist’, ‘Login whitelist’ and ‘Login lockout IP whitelist’ to be enabled.
    • TWEAK: Added error message when a user tries to block their own IP on registration approval
    • TWEAK: Added method to update badge on AJAX call
    • TWEAK: internal refactor of the AIOWPSecurity_Utility_File class to improve code clarity
    • TWEAK: Seasonal notice content update for 2024
  10. All-In-One Security (AIOS) 5.2.9

    • FIX: Remove call to update_event_table_column_to_timestamp in update routine
    • FIX: Remove call to wp_timezone() which is only available in WP 5.3+
  11. All-In-One Security (AIOS) 5.2.8

    • FIX: The user check that affects the Duo authentication plugin
    • FIX: Database update routine is now run without needing to visit the admin interface or each individual site in a multisite
    • FIX: Some settings in the firewall menu not resetting after deactivating and reactivating the plugin.
    • TWEAK: Audit log and 404 events CSV export file date time column is now in a human readable format not unix timestamp
    • TWEAK: Debug log table existing datetime field converted to timestamp to be timezone independent
    • TWEAK: Global meta table existing datetime field converted to timestamp to be timezone independent
    • TWEAK: Permanent block table existing datetime field converted to timestamp to be timezone independent
    • TWEAK: Refactor list item actions to further improve code clarity
    • TWEAK: Removed blacklist admin menu as previously announced
    • TWEAK: Removed miscellaneous admin menu as previously announced
    • TWEAK: Removed various admin menu tabs as previously announced
    • TWEAK: Store IP lookup result for other types of entries in the login lockdown table
    • TWEAK: Update the footer review prompt
    • TWEAK: Max file upload size limit to 250 MB by aiowps_max_allowed_upload_config filter removed
    • TWEAK: Improve comment spam detection to not interfere with other forms
  12. All-In-One Security (AIOS) 5.2.7

  13. All-In-One Security (AIOS) 5.2.6

202311 releases

  1. All-In-One Security (AIOS) 5.2.5

  2. All-In-One Security (AIOS) 5.2.4

  3. All-In-One Security (AIOS) 5.2.3

  4. All-In-One Security (AIOS) 5.2.2

  5. All-In-One Security (AIOS) 5.2.1

  6. All-In-One Security (AIOS) 5.2.0

  7. All-In-One Security (AIOS) 5.1.9

  8. All-In-One Security (AIOS) 5.1.8

  9. All-In-One Security (AIOS) 5.1.7

  10. All-In-One Security (AIOS) 5.1.6

  11. All-In-One Security (AIOS) 5.1.5

202219 releases

  1. All-In-One Security (AIOS) 5.1.4

  2. All-In-One Security (AIOS) 5.1.3

  3. All-In-One Security (AIOS) 5.1.2

  4. All-In-One Security (AIOS) 5.1.1

  5. All-In-One Security (AIOS) 5.1.0

  6. All-In-One Security (AIOS) 5.0.9

  7. All-In-One Security (AIOS) 5.0.8

  8. All-In-One Security (AIOS) 5.0.7

  9. All-In-One Security (AIOS) 5.0.6

  10. All-In-One Security (AIOS) 5.0.5

  11. All-In-One Security (AIOS) 5.0.4

  12. All-In-One Security (AIOS) 5.0.3

  13. All-In-One Security (AIOS) 5.0.2

  14. All-In-One Security (AIOS) 5.0.1

  15. All-In-One Security (AIOS) 5.0.0

  16. All-In-One Security (AIOS) 4.4.12

  17. All-In-One Security (AIOS) 4.4.11

  18. All-In-One Security (AIOS) 4.4.10

  19. All-In-One Security (AIOS) 4.4.9

20211 release

  1. All-In-One Security (AIOS) 4.4.8

20202 releases

  1. All-In-One Security (AIOS) 4.4.4

  2. All-In-One Security (AIOS) 4.4.2

20195 releases

  1. All-In-One Security (AIOS) 4.4.0

  2. All-In-One Security (AIOS) 4.3.9.4

  3. All-In-One Security (AIOS) 4.3.9.3

  4. All-In-One Security (AIOS) 4.3.9.2

  5. All-In-One Security (AIOS) 4.3.9.1

20186 releases

  1. All-In-One Security (AIOS) 4.3.8.3

  2. All-In-One Security (AIOS) 4.3.8.2

  3. All-In-One Security (AIOS) 4.3.8.1

  4. All-In-One Security (AIOS) 4.3.7.2

  5. All-In-One Security (AIOS) 4.3.7.1

  6. All-In-One Security (AIOS) 4.3.1

20172 releases

  1. All-In-One Security (AIOS) 4.2.9

  2. All-In-One Security (AIOS) 4.2.8

20168 releases

  1. All-In-One Security (AIOS) 4.2.2

  2. All-In-One Security (AIOS) 4.1.7

  3. All-In-One Security (AIOS) 4.1.4

  4. All-In-One Security (AIOS) 4.1.0

  5. All-In-One Security (AIOS) 4.0.9

  6. All-In-One Security (AIOS) 4.0.8

  7. All-In-One Security (AIOS) 4.0.7

  8. All-In-One Security (AIOS) 4.0.3

20154 releases

  1. All-In-One Security (AIOS) 4.0.1

  2. All-In-One Security (AIOS) 3.9.9

  3. All-In-One Security (AIOS) 3.9.6

  4. All-In-One Security (AIOS) 3.9.5

201410 releases

  1. All-In-One Security (AIOS) 3.8.7

  2. All-In-One Security (AIOS) 3.7.7

  3. All-In-One Security (AIOS) 3.7.6

  4. All-In-One Security (AIOS) 3.7.5

  5. All-In-One Security (AIOS) 3.7.3

  6. All-In-One Security (AIOS) 3.7.1

  7. All-In-One Security (AIOS) 3.6

  8. All-In-One Security (AIOS) 3.5.1

  9. All-In-One Security (AIOS) 3.4

  10. All-In-One Security (AIOS) 3.3

201324 releases

  1. All-In-One Security (AIOS) 3.2

  2. All-In-One Security (AIOS) 3.1

  3. All-In-One Security (AIOS) 3.0

  4. All-In-One Security (AIOS) 2.9

  5. All-In-One Security (AIOS) 2.8.1

  6. All-In-One Security (AIOS) 2.8

  7. All-In-One Security (AIOS) 2.7

  8. All-In-One Security (AIOS) 2.6

  9. All-In-One Security (AIOS) 2.5

  10. All-In-One Security (AIOS) 2.4

  11. All-In-One Security (AIOS) 2.3

  12. All-In-One Security (AIOS) 2.2

  13. All-In-One Security (AIOS) 2.1.1

  14. All-In-One Security (AIOS) 2.0

  15. All-In-One Security (AIOS) 1.9

  16. All-In-One Security (AIOS) 1.8

  17. All-In-One Security (AIOS) 1.7

  18. All-In-One Security (AIOS) 1.6

  19. All-In-One Security (AIOS) 1.5

  20. All-In-One Security (AIOS) 1.4

  21. All-In-One Security (AIOS) 1.3

  22. All-In-One Security (AIOS) 1.2

  23. All-In-One Security (AIOS) 1.1

  24. All-In-One Security (AIOS) 1.0

Questions about All-In-One Security (AIOS)’s releases

What is the latest version of All-In-One Security (AIOS)?

5.5.1, released on Oct 30, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is All-In-One Security (AIOS) updated?

9 releases in the last year, about one every 44 days. Its first release on WordPress.org dates from June 2013.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in All-In-One Security (AIOS)’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.