Vulnerabilities in SiteGround
12 resultsCVE-2022-0993HIGHSiteGround Security <= 1.2.5 - Authorization Weakness to Authentication BypassEPSS 7.5%CVE-2022-0992CRITICALSiteGround Security <= 1.2.5 - Authentication Bypass via 2FA SetupEPSS 2.9%CVE-2019-25217CRITICALSiteGround Optimizer <= 5.0.12 - Missing AuthorizationEPSS 0.9%CVE-2024-32532MEDIUMWordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-17153MEDIUMAI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST EndpointEPSS 0.5%CVE-2026-15421MEDIUMSpeed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag AttributesEPSS 0.4%CVE-2024-38774MEDIUMWordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-82228HIGHWordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerabilityEPSS 0.4%CVE-2025-66121MEDIUMWordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-24547MEDIUMWordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57416HIGHWordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-62912MEDIUMWordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%