Read the docs

SiteGround

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

SiteGround records in CISA KEV

No SiteGround vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Siteground Security 2 records HIGH Security Optimizer 1 record HIGH Speed Optimizer 1 record MEDIUM

Records

1 record in Security Optimizer · all components

TI-2022-00891 CVE-2022-0992 · GHSA-5mrq-972x-qwr6

SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup

Priority HIGH 82

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02943 Published 2022-04-19 No fix listed CWE-288
Open these records in search →