SiteGround
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| SiteGround Email Marketing | 3 | – | Jul 13, 2026 |
| SiteGround Security | 3 | – | Aug 31, 2026 |
| Security Optimizer – The All-In-One Protection Plugin | 2 | – | Apr 19, 2022 |
| AI Agent by SiteGround | 1 | – | Aug 20, 2026 |
| Speed Optimizer | 1 | – | Apr 17, 2024 |
| Speed Optimizer – The All-In-One Performance-Boosting Plugin | 1 | – | Aug 19, 2026 |
Exploited and recent CVEs
- CVE-2026-82228 WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability 0.4%
- CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint 0.5%
- CVE-2026-15421 Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes 0.4%
- CVE-2026-57416 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-24547 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability 0.3%
- CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability 0.3%
- CVE-2025-62912 WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-38774 WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability 0.4%
- CVE-2024-32532 WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability 0.5%
- CVE-2022-0993 SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass 7.5%
- CVE-2022-0992 SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup 2.9%