Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: SiteGround Clear all filters
TI-2026-14249 CVE-2026-17153 · GHSA-qg2p-54pj-chvp

Missing authorization in SiteGround AI Agent by SiteGround

Priority LOW 30

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00463 Published 2026-08-20 No fix listed CWE-862
TI-2026-12977 CVE-2026-15421 · GHSA-8r64-rxjj-mp32

Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes

Priority LOW 29

The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00408 Published 2026-08-19 No fix listed CWE-79
TI-2026-41353 CVE-2026-57416 · GHSA-g75q-mjpx-5hhg

WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2025-40646 CVE-2025-66121 · GHSA-j9wm-m2fc-3vmp

WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through <= 1.5.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0032 Published 2025-12-16 No fix listed CWE-862
TI-2025-39060 CVE-2025-62912 · GHSA-57jv-qvc3-pqvx

WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-27 No fix listed CWE-79
TI-2024-26008 CVE-2024-38774 · GHSA-pg3h-4g9w-xv34

WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00408 Published 2024-11-01 No fix listed CWE-862
TI-2019-15271 CVE-2019-25217 · GHSA-5xpj-qjq8-m3v5

SiteGround Optimizer <= 5.0.12 - Missing Authorization

Priority MEDIUM 50

The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect use of an access con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0085 Published 2024-10-16 Fixed in 5.0.13 CWE-862
TI-2023-00224 CVE-2023-0234 · GHSA-x4xc-8g7v-c85h

SiteGround Security < 1.3.1 - Admin+ SQLi

Priority HIGH 73

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.17992 Published 2023-02-06 Fixed in 1.3.1
TI-2022-00892 CVE-2022-0993 · GHSA-24fr-xcq3-rqjr

SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass

Priority HIGH 76

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code impleme…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07538 Published 2022-04-19 No fix listed CWE-285
TI-2022-00891 CVE-2022-0992 · GHSA-5mrq-972x-qwr6

SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup

Priority HIGH 82

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02943 Published 2022-04-19 No fix listed CWE-288