Siteground vulnerabilities

Products

• Security 4
• Speed Optimizer 4
• Email Marketing 3
• Security Optimizer – The All-in-one Protection Plugin 2
• Security 2
• Speed Optimizer – The All-in-one Performance-boosting Plugin 2

Newest

• siteground speed optimizer Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-option CVE-2026-111738 5.5 MediumOctober 23, 2026
• siteground speed optimizer Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL Lists CVE-2026-111737 3.5 LowOctober 23, 2026
• siteground security WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability CVE-2026-82228 8.1 HighAugust 31, 2026
• siteground ai agent by siteground AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint CVE-2026-17153 5.3 MediumAugust 20, 2026
• siteground speed optimizer – the all-in-one performance-boosting plugin Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes CVE-2026-15421 6.4 MediumAugust 19, 2026
• siteground email marketing WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-57416 7.1 HighJuly 13, 2026
• siteground email marketing WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability CVE-2026-24547 5.3 MediumJune 26, 2026
• creative motion clearfy cache, optimizingmatters autoptimize, siteground speed optimizer +2 more Multiple Plugins - Unauthenticated Stored XSS via Minify Library CVE-2026-3220 8.8 HighMay 18, 2026
• siteground security WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability CVE-2025-66121 5.3 MediumDecember 16, 2025
• siteground email marketing WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62912 6.5 MediumOctober 27, 2025
• siteground security WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability CVE-2024-38774 5.4 MediumNovember 1, 2024
• siteground speed optimizer – the all-in-one performance-boosting plugin, speed optimizer +1 more SiteGround Optimizer <= 5.0.12 - Missing Authorization CVE-2019-25217 9.8 CriticalOctober 16, 2024
• siteground speed optimizer WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability CVE-2024-32532 5.3 MediumApril 17, 2024
• siteground security, unknown siteground security +1 more SiteGround Security < 1.3.1 - Admin+ SQLi CVE-2023-0234 EPSS 18.0% 8.8 HighFebruary 6, 2023
• siteground security, security optimizer – the all-in-one protection plugin +1 more SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass CVE-2022-0993 8.1 HighApril 19, 2022
• siteground security optimizer – the all-in-one protection plugin, security optimizer +1 more SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup CVE-2022-0992 9.8 CriticalApril 19, 2022