Security Optimizer – The All-In-One Protection Plugin
Information
| Software Type | Plugin |
|---|---|
| Software Slug | sg-security (view on wordpress.org) |
| Software Status | Active |
| Software Author | siteground |
| Software Website | siteground.com |
| Software Downloads | 38,778,553 |
| Software Active Installs | 1,000,000 |
| Software Record Last Updated | September 12, 2026 |
7 Vulnerabilities
Researcher:
Ananda Dhakal
Researcher:
Shivamani Vastrala
Researcher:
Legion Hunter
Researcher:
Rafie Muhammad
Researcher:
So Sakaguchi
Researcher:
Chloe Chamberland
Researcher:
Chloe Chamberland
| Title | Status | CVE ID | CVSS | Researchers | Date |
|---|---|---|---|---|---|
| Security Optimizer – The All-In-One Protection Plugin <= 1.6.6 - 2-Factor Authentication Bypass | Patched | CVE-2026-82228 | Ananda Dhakal | August 28, 2026 | |
| Security Optimizer – The All-In-One Protection <= 1.6.4 - IP Allowlist Bypass | Patched | CVE-2026-13342 | Shivamani Vastrala | July 23, 2026 | |
| SiteGround Security <= 1.5.8 - Missing Authorization | Patched | CVE-2025-66121 | Legion Hunter | November 30, 2025 | |
| Security Optimizer – The All-In-One Protection Plugin <= 1.5.0 - Missing Authorization via hide_notice() | Patched | CVE-2024-38774 | Rafie Muhammad | July 19, 2024 | |
| SiteGround Security <= 1.3.0 - Authenticated (Administrator+) SQL Injection | Patched | CVE-2023-0234 | So Sakaguchi | January 13, 2023 | |
| SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass | Patched | CVE-2022-0993 | Chloe Chamberland | April 7, 2022 | |
| SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup | Patched | CVE-2022-0992 | Chloe Chamberland | April 6, 2022 |
Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!
Learn moreWant to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.
The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.
Documentation