Lucene search
K

86 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:41 a.m.8 views

CVE-2022-0992

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized users to configure 2FA for pending...

9.8CVSS7AI score0.04367EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/12/17 10:2 a.m.1 views

CVE-2025-66121

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS7AI score0.00062EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.1 views

EUVD-2025-203588

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

6.5AI score0.00062EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.1 views

CVE-2025-66121

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS0.00062EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.29 views

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS0.00062EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.1 views

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS6.6AI score0.00062EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.3 views

CVE-2025-66121

CVE-2025-66121 affects the WordPress plugin SiteGround Security (sg-security) , versions up to and including 1.5.8. The issue is described as a Missing Authorization / Broken Access Control vulnerability arising from incorrectly configured access control security levels, enabling exploitation aga...

5.3CVSS6.6AI score0.00062EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

WordPress plugin SiteGround Security 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00062EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51410

Name of the Vulnerable Software and Affected Versions SiteGround Security versions through 1.5.8 Description A missing authorization issue exists in SiteGround Security sg-security, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update SiteGrou...

6.5AI score0.00062EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/30 11:43 a.m.2 views

WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SiteGround Security versions = 1.5.8...

5.3CVSS7AI score0.00062EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.1 views

CVE-2025-62912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.1 views

EUVD-2025-36027

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

5.5AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.1 views

CVE-2025-62912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

6.5CVSS0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:33 a.m.5 views

CVE-2025-62912

CVE-2025-62912 corresponds to a Stored XSS in the WordPress plugin SiteGround Email Marketing (versions up to 1.7.1). The issue arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Public sources (NVD, Red Hat, ENISA EUVD, CVE List) confirm t...

6.5CVSS5.6AI score0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.1 views

CVE-2025-62912 WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

6.5CVSS5.6AI score0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:33 a.m.5 views

CVE-2025-62912 WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

6.5CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.1 views

WordPress plugin SiteGround Email Marketing 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site...

6.5CVSS5.7AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-43790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...

5.4CVSS6AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-19365

Malware in sbrugna...

9.8CVSS6.4AI score0.09631EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-15986

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.03267EPSS
Exploits2References4
Rows per page
Query Builder