Siteground
7 CVEs across 8 Siteground products. Browse Siteground vulnerabilities, severities, and proof-of-concept exploits.
Siteground products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57416 | High | 7.1 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-ma… |
CVE-2026-24547 | Medium | 5.3 | 2026-06-26 | Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. |
CVE-2025-66121 | Medium | 5.3 | 2025-12-16 | Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62912 | Medium | 6.5 | 2025-10-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-ma… |
CVE-2024-38774 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2019-25217 | Critical | 9.8 | 2024-10-16 | The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to… |
CVE-2024-32532 | Medium | 5.3 | 2024-04-17 | Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6. |
CVE-2023-0234 | High | 8.8 | 2023-02-06 | The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL in… |
CVE-2022-0993 | High | 8.1 | 2022-04-19 | The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to… |
CVE-2022-0992 | Critical | 9.8 | 2022-04-19 | The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to… |