Security Optimizer – The All-In-One Protection Plugin vulnerabilities

2 known vulnerabilities in Security Optimizer – The All-In-One Protection Plugin from SiteGround. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Security Optimizer – The All-In-One Protection…: Missing Authentication for Critical Functionality

  CVE-2022-0993Apr 19, 2022SiteGroundEPSS 7.54%

  The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success.

• 9.8 Critical severity

  Security Optimizer – The All-In-One Protection…: Missing Authentication for Critical Functionality

  CVE-2022-0992Apr 19, 2022SiteGroundEPSS 2.94%

  The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized user