Approved changes feed: RSS · Atom

cpe:2.3:a:siteground:security_optimizer_–_the_all-in-one_wordpress_protection_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiteground (75ba3050-2314-5687-93e4-1dbfe7f8966a)
ProductSecurity Optimizer – The All In One Wordpress Protection Plugin (93b02150-c07b-5e37-bf8d-37c05b7c69d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0993 vulnerable 2026-06-08 05:39:11.618587 SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass
HIGH (8.1)
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and including, 1.2.5.
Published: 2022-04-19T20:26:36.000Z
Updated: 2026-04-08T17:06:18.657Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.