Read the docs

SiteGround

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

SiteGround records in CISA KEV

No SiteGround vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Siteground Security 2 records HIGH Security Optimizer 1 record HIGH Speed Optimizer 1 record MEDIUM

Records

2 records in Siteground Security · all components

TI-2022-00892 CVE-2022-0993 · GHSA-24fr-xcq3-rqjr

SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass

Priority HIGH 76

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code impleme…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07538 Published 2022-04-19 No fix listed CWE-285
TI-2023-00224 CVE-2023-0234 · GHSA-x4xc-8g7v-c85h

SiteGround Security < 1.3.1 - Admin+ SQLi

Priority HIGH 73

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17992 Published 2023-02-06 Fixed in 1.3.1
Open these records in search →