Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-02
Security Optimizer - Security Vulnerability (CVE-2026-118185)
The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor and take over the account.
PLUGIN
Security Optimizer
CVE-2026-118185
Risk Score
Threat Entry
Updated 2026-08-26
Security Optimizer - Broken Access Control (CVE-2026-13342)
The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeating the access control the administrator configured.
PLUGIN
Security Optimizer
CVE-2026-13342
Risk Score
Threat Entry
Updated 2026-06-17
Security Optimizer - Authentication Bypass (CVE-2022-0992)
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized users to configure 2FA for pending accounts. Upon successful configuration, the attacker is logged in as that user without access to a username/password pair which is the expected first form of authentication. This affects versions up to, and including, 1.2.5.
PLUGIN
Security Optimizer
CVE-2022-0992
Risk Score