Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

siteground — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting siteground. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SiteGround provides web hosting and cloud infrastructure services, supporting websites and applications globally. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from misconfigurations in shared hosting environments and third-party integrations. The platform has faced security incidents, including a 2020 breach affecting customer credentials and a 2023 vulnerability in its WordPress management tool that exposed sensitive data. Despite these issues, SiteGround maintains security certifications and regular vulnerability assessments, though its shared hosting architecture presents inherent risks requiring robust customer-side security practices.

CVE ID Title CVSS Severity Published
CVE-2026-82228 WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability — SiteGround Security CWE-290 8.1 High 2026-08-31
CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint — AI Agent by SiteGround CWE-862 5.3 Medium 2026-08-20
CVE-2026-15421 Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes — Speed Optimizer – The All-In-One Performance-Boosting Plugin CWE-79 6.4 Medium 2026-08-19
CVE-2026-57416 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability — SiteGround Email Marketing CWE-79 7.1 High 2026-07-13
CVE-2026-24547 WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability — SiteGround Email Marketing CWE-862 5.3 Medium 2026-06-26
CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability — SiteGround Security CWE-862 5.3 Medium 2025-12-16
CVE-2025-62912 WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability — SiteGround Email Marketing CWE-79 6.5 Medium 2025-10-27
CVE-2024-38774 WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability — SiteGround Security CWE-862 5.4 Medium 2024-11-01
CVE-2019-25217 SiteGround Optimizer <= 5.0.12 - Missing Authorization — Speed Optimizer – The All-In-One Performance-Boosting Plugin CWE-862 9.8 Critical 2024-10-16
CVE-2024-32532 WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability — Speed Optimizer CWE-862 5.3 Medium 2024-04-17
CVE-2022-0993 SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass — Security Optimizer – The All-In-One Protection Plugin CWE-285 8.1 High 2022-04-19
CVE-2022-0992 SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup — Security Optimizer – The All-In-One Protection Plugin CWE-288 9.8 Critical 2022-04-19

This page lists every published CVE security advisory associated with siteground. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.