Skip to content
OpenAdvisories

Vendor

SiteGround

12 known vulnerabilities.

Products

SiteGround Security 3 SiteGround Email Marketing 3 Speed Optimizer – The All-In-One Performance-Boosting Plugin 2 Security Optimizer – The All-In-One Protection Plugin 2 Speed Optimizer 1 AI Agent by SiteGround 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-17153

    AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint

    The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unau…

    SiteGround AI Agent by SiteGround Web / CMS
  • Medium 6.4
    CVE-2026-15421

    Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes

    The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in all versions up to, and including, 7.8.0 due to insufficient input sanitization and output escaping.…

    SiteGround Speed Optimizer – The All-In-One Performance-Boosting Plugin Web / CMS
  • Medium 5.3
    CVE-2026-24547

    WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.

    SiteGround SiteGround Email Marketing
  • Medium 5.3
    CVE-2025-66121

    WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through <= 1.5.8.

    SiteGround SiteGround Security
  • Medium 6.5
    CVE-2025-62912

    WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through <= 1.7.1.

    SiteGround SiteGround Email Marketing
  • Medium 5.4
    CVE-2024-38774

    WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0.

    SiteGround SiteGround Security
  • Medium 5.3
    CVE-2024-32532

    WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6.

    SiteGround Speed Optimizer