Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-0993
HistoryApr 19, 2022 - 9:15 p.m.

Authentication flaw

2022-04-1921:15:00
PRIOn knowledge base
www.prio-n.com
3

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and including, 1.2.5.

CPENameOperatorVersion
siteground_securityle1.2.5

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%