CyberRota Analysis
AI-GeneratedThe Security Optimizer plugin for WordPress versions 1.5.8 to 1.6.4 is vulnerable due to improper validation of requests for its IP-based login restriction feature, allowing unauthorized access to the login form from non-allowlisted IP addresses. This flaw undermines the intended access controls set by administrators, potentially exposing the site to unauthorized login attempts. WordPress site administrators using this plugin should prioritize applying updates to mitigate the risk of unauthorized access.
Original NVD Description
The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeating the access control the administrator configured.