CyberSecBulletin

Security Optimizer vulnerabilities

We track 1 vulnerability in Security Optimizer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Security Optimizer vulnerabilities

  • 7.5 High severity

    Security Optimizer: Improper Authentication

    CVE-2026-118185Security Optimizer

    The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over