Vulnerabilities / Security Optimizer – The All-In-One Protection Plugin
Security Optimizer – The All-In-One Protection Plugin vulnerabilities
Advisories WPSec published for Security Optimizer – The All-In-One Protection Plugin. Other sources may list more. Its attack surface: Security Optimizer – The All-In-One Protection Plugin on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-0991 | Security Optimizer – The All-In-One Protection Plugin <= 1.6.8 - Unauthenticated Two-Factor Authentication Bypass via Valid Pre-2FA Session | High 8.1 | 1.6.9 |
| 2026-10-15 | WPSEC-2026-0990 | Security Optimizer – The All-In-One Protection Plugin <= 1.6.8 - Unauthenticated Two-Factor Authentication Bypass for Multisite Super Administrators | High 8.1 | 1.6.9 |
| 2026-10-15 | WPSEC-2026-0989 | Security Optimizer – The All-In-One Protection Plugin <= 1.6.8 - Unauthenticated Two-Factor Authentication Bypass via Brute Force | High 8.1 | 1.6.9 |
License: CC BY 4.0