WordPress SiteGround Security plugin <= 1.2.5 - Authentication Bypass via 2-Factor Authentication Setup vulnerability

2022-04-0700:00:00

Chloe Chamberland (Wordfence)

patchstack.com

0.005 Low

EPSS

Percentile

76.4%

JSON

Authentication Bypass via 2-Factor Authentication Setup vulnerability discovered by Chloe Chamberland (Wordfence) in WordPress SiteGround Security plugin (versions <= 1.2.5).

Solution

           Update the WordPress SiteGround Security plugin to the latest available version (at least 1.2.6).

CPENameOperatorVersion
siteground securityle1.2.5

CPE	Name	Operator	Version
	siteground security	le	1.2.5

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0992

wordpress.org/plugins/sg-security/#developers

www.wordfence.com/blog/2022/04/critical-authentication-bypass-vulnerability-patched-in-siteground-security-plugin/

0.005 Low

EPSS

Percentile

76.4%

JSON

Related for PATCHSTACK:47E6E611DDC0B710C446E3EBA43FAAF7