CVE Database /
CVE-2022-0992
CVE · Critical
CVE-2022-0992 — Security Optimizer – The All-In-One Protection Plugin [sg-security] < 1.2.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-0992
|
Security Optimizer – The All-In-One Protection Plugin [sg-security] < 1.2.6 |
Authentication Bypass Using an Alternate Path or Channel |
Critical
9.8
|
< 1.2.6
|
1.2.6 |
2022-04-06 |
—
|
CVE-2022-0992
The SiteGround Security plugin before version 1.2.6 contains an authentication bypass vulnerability in its two-factor authentication setup process. An unauthenticated attacker can configure 2FA for accounts that are still pending, and upon completing this configuration, the attacker gains login access as an administrative user without needing valid credentials. This flaw allows attackers to circumvent the standard username and password authentication mechanism entirely.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings