WordPress SiteGround Security plugin <= 1.2.5 - Authorization Weakness to Authentication Bypass via 2-Factor Authentication Back-up Codes vulnerability

2022-04-0700:00:00

Chloe Chamberland (Wordfence)

patchstack.com

0.003 Low

EPSS

Percentile

70.7%

JSON

Authorization Weakness to Authentication Bypass via 2-Factor Authentication Back-up Codes vulnerability discovered by Chloe Chamberland (Wordfence) in WordPress SiteGround Security plugin (versions <= 1.2.5).

Solution

           Update the WordPress SiteGround Security plugin to the latest available version (at least 1.2.6).

CPENameOperatorVersion
siteground securityle1.2.5

CPE	Name	Operator	Version
	siteground security	le	1.2.5

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0993

wordpress.org/plugins/sg-security/#developers

www.wordfence.com/blog/2022/04/critical-authentication-bypass-vulnerability-patched-in-siteground-security-plugin/

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for PATCHSTACK:CB0A851C33907080D175F1977F373F71