siteground vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20243
3. 20252
4. 20265

Newest CVEs

• CVE-2026-82228

  WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability

  SiteGround · SiteGround Security

  High8.1
• CVE-2026-17153

  AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint

  siteground · AI Agent by SiteGround

  Medium5.3
• CVE-2026-15421

  Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes

  siteground · Speed Optimizer – The All-In-One Performance-Boosting Plugin

  Medium6.4
• CVE-2026-57416

  WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

  SiteGround · SiteGround Email Marketing

  High7.1
• CVE-2026-24547

  WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability

  SiteGround · SiteGround Email Marketing

  Medium5.3
• CVE-2025-66121

  WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

  SiteGround · SiteGround Security

  Medium5.3
• CVE-2025-62912

  WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

  SiteGround · SiteGround Email Marketing

  Medium6.5
• CVE-2024-38774

  WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

  SiteGround · SiteGround Security

  Medium5.4
• CVE-2019-25217

  SiteGround Optimizer <= 5.0.12 - Missing Authorization

  siteground · Speed Optimizer – The All-In-One Performance-Boosting Plugin

  Critical9.8
• CVE-2024-32532

  WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

  SiteGround · Speed Optimizer

  Medium5.3