In reply to Dan Knauss.

Or how about some of the SQLi vulnerabilities directly in AIOWS?

https://patchstack.com/database/vulnerability/all-in-one-wp-security-and-firewall