If you are looking to find out about vulnerabilities in All In One WP Security & Firewall or another plugin you use or are looking to use, you won't find most of our data on our blog. Instead you should sign up for our service so that you get access to all of the data we have gathered, which is much more data than other sources out there will provide you. You can start using the service for free when you sign up now.
Nearly two years ago we looked over the vulnerabilities that were in our data set at the time to get a better understanding of how often security fixes are left out of the changelog entries for the version of the WordPress plugin that fixed it. We found that nearly 20 percent of the time no mention was made of a vulnerability being fixed (that included one instance were the vulnerability was being exploited before it was fixed). That is a good reminder that you really need to be keeping your plugin update at all times since there is good chance you won’t know that an update includes a security fix.
When it comes to the poor state of security one of the big problems is that instead of addressing the causes of that poor security, the focus is often on pushing security products, which are often of limited use and when it comes to WordPress plugins, are known to introduce their own security vulnerabilities.