Recently, there have been many "two-level protection" attacks against security control center from sites connected to security control center.
Also, from a few days ago, "two-level protection" attacks against sites, connected to the Security Control Center, from the Security Control Center have been increasing.
I think this phenomenon started to appear after Security Check Pro version 3.2.0 or later and Security Control Center version 2.0.0 or later.
I have to check this because it's clear that are false positives. To solve this just add com_securitycheckpro as exception into Waf Configuration -> filter exceptions -> second level tab.