Security Optimizer – The All-In-One Protection Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 94% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Most reviewers call it simple and reliable to set up, but a steady minority report compatibility clashes with plugins like Elementor, TranslatePress and PayPal, plus a repeatedly popping data-consent request some find pushy.

1. ★★★★★ aikotimmer

   3mo ago

   easy to use

   Read on wp.org ↗
2. ★★★★★ Paul Coughlin

   4mo ago

   As a long time user of StiteGround this is always loaded as standard.. Also very pleased to hear it works excellently on a Hostinger VPS I use for testing. Excellent plugin.

   Read on wp.org ↗
3. ★★★★★ sahara8

   6mo ago

   Installed it to improve my site security. The interface is simple, and most features work well. Had to tweak a few settings, but nothing complicated. Overall, pretty useful plugin. tnx devs. This topic was modified 4 months, 1 week ago by sahara8.

   Read on wp.org ↗
4. ★★★★★ Apple.WP-Dev

   7mo ago

   This plugin seems to be designed for SiteGround hosting only. I am using SiteGround, and the plugin works well except for the file whitelisting feature. I applied the sgs_whitelist_wp_content custom filter from the SiteGround documentation; while it resolved the Apache error, the file is still being blocked. This is a known issue for myself and others, specifically regarding the TranslatePress trp-ajax.php file. This topic was modified 5 months, 2 weeks ago by Apple.WP-Dev.

   Read on wp.org ↗
5. ★★★★★ dongermibbs

   8mo ago

   This plugin has caused nothing but endless problems. It clashes with Elementor and Papal payment plugins. Of course, all Siteground do is blame the other companies, as if their plugin is perfect. Worst of all it repeatedly asks you to consent to sending data to Siteground. There is no refusal box. So the box pops up every time you choose a different menu selection. It is a cynical attempt to get you tick the box, and allow them to abuse your data, to make it go away. I intend to report Siteground to the ICO for this invasive demand. This topic was modified 6 months, 3 weeks ago by dongermibbs.

   Read on wp.org ↗
6. ★★★★★ alaidlaw

   8mo ago

   Excellent easy to follow info

   Read on wp.org ↗
7. ★★★★★ solucionespirita

   10mo ago

   fulfills its purpose completely, very good

   Read on wp.org ↗
8. ★★★★★ deniz15

   10mo ago

   Pretty simple and light weight

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.6.5 Release Date Jul 9th, 2026 Security improvements Dashboard visuals improvements 1.6.5
2. — Version 1.6.4 Release Date Jul 1st, 2026 Security improvements 1.6.4
3. — Version 1.6.3 Release Date Jun 22th, 2026 Version bump 1.6.3
4. — Version 1.6.2 Release Date May 7th, 2026 2FA improvements Activity Log improvements Weekly Email Reports improvements 1.6.2
5. — Version 1.6.1 Release Date May 5th, 2026 Email Service improvements 1.6.1
6. — Version 1.6.0 Release Date Mar 30th, 2026 Security improvements Activity Log improvements Third-party plugin compatibility improvements 1.6.0

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Security Optimizer – The All-In-One Protection <= 1.6.4 - IP Allowlist Bypass ↗
   2026-07-23 CVE-2026-13342 Use of Less Trusted Source Affects <= 1.6.4 Patched in 1.6.5
2. Medium · 5.3 SiteGround Security <= 1.5.8 - Missing Authorization ↗
   2025-11-30 CVE-2025-66121 Missing Authorization Affects <= 1.5.8 Patched in 1.5.9
3. Medium · 4.3 Security Optimizer – The All-In-One Protection Plugin <= 1.5.0 - Missing Authorization via hide_notice() ↗
   2024-07-19 CVE-2024-38774 Missing Authorization Affects <= 1.5.0 Patched in 1.5.1
4. High · 7.2 SiteGround Security <= 1.3.0 - Authenticated (Administrator+) SQL Injection ↗
   2023-01-13 CVE-2023-0234 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.0 Patched in 1.3.1
5. High · 8.1 SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass ↗
   2022-04-07 CVE-2022-0993 Improper Authorization Affects <= 1.2.5 Patched in 1.2.6
6. Critical · 9.8 SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup ↗
   2022-04-06 CVE-2022-0992 Authentication Bypass Using an Alternate Path or Channel Affects <= 1.2.5 Patched in 1.2.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 19 languages, 11 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-08 900K+ → 1M+ up after 45 days in tier
2. 2025-12-25 1M+ → 900K+ down after 1 days in tier
3. 2025-12-24 900K+ → 1M+ up after 4 days in tier
4. 2025-12-20 1M+ → 900K+ down after 7 days in tier
5. 2025-12-13 900K+ → 1M+ up after 1 days in tier
6. 2025-12-12 1M+ → 900K+ down after 2 days in tier
7. 2025-12-10 900K+ → 1M+ up after 10 days in tier
8. 2025-11-30 1M+ → 900K+ down after 71 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• RSFirewall! 4K+ installs · 4.2★ · 4 shared tags A
• BBQ Firewall – Fast & Powerful Firewall Security 100K+ installs · 4.9★ · 3 shared tags A
• WP Ghost (Hide My WP Ghost) – Security & Firewall 100K+ installs · 4.5★ · 3 shared tags A
• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 3 shared tags A
• Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 3 shared tags A
• BulletProof Security 20K+ installs · 4.8★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Security Optimizer – The All-In-One Protection Plugin into a readme, a review or a deck. It updates itself.

Security Optimizer – The All-In-One Protection Plugin: 1M+ active installs, 4.5★ (157 reviews). Plugin Pulse (WP Mayor), as of 2026-08-26. https://plugins.wpmayor.com/plugin/sg-security