Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: SiteGround Component: Siteground Security Clear all filters
TI-2023-00224 CVE-2023-0234 · GHSA-x4xc-8g7v-c85h

SiteGround Security < 1.3.1 - Admin+ SQLi

Priority HIGH 73

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17992 Published 2023-02-06 Fixed in 1.3.1
TI-2022-00892 CVE-2022-0993 · GHSA-24fr-xcq3-rqjr

SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass

Priority HIGH 76

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code impleme…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07538 Published 2022-04-19 No fix listed CWE-285