Vulnerabilities in siteground
9 resultsVexday analysis
SiteGround possui 3 vulnerabilidades catalogadas, sendo 2 críticas, porém nenhuma sob ataque ativo no momento. A fraqueza dominante está relacionada a controles de acesso (CWE-285), indicando potenciais falhas na autenticação ou autorização. Sem publicações recentes nos últimos 90 dias, o risco atual é contido, mas a natureza crítica de algumas vulnerabilidades justifica atenção ao cronograma de patches.
CVE-2022-0993HIGHSiteGround Security <= 1.2.5 - Authorization Weakness to Authentication BypassEPSS 7.3%CVE-2022-0992CRITICALSiteGround Security <= 1.2.5 - Authentication Bypass via 2FA SetupEPSS 2.8%CVE-2019-25217CRITICALSiteGround Optimizer <= 5.0.12 - Missing AuthorizationEPSS 0.9%CVE-2024-32532MEDIUMWordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-38774MEDIUMWordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-66121MEDIUMWordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-24547MEDIUMWordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62912MEDIUMWordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57416HIGHWordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%