Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:41 a.m.14 views

CVE-2022-0992

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized users to configure 2FA for pending...

9.8CVSS7AI score0.04367EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/12/17 10:2 a.m.2 views

CVE-2025-66121

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS7AI score0.00062EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.1 views

EUVD-2025-203588

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

6.5AI score0.00062EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.2 views

CVE-2025-66121

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS0.00062EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.4 views

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS6.6AI score0.00062EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.29 views

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

5.3CVSS0.00062EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.5 views

CVE-2025-66121

CVE-2025-66121 affects the WordPress plugin SiteGround Security (sg-security) , versions up to and including 1.5.8. The issue is described as a Missing Authorization / Broken Access Control vulnerability arising from incorrectly configured access control security levels, enabling exploitation aga...

5.3CVSS6.6AI score0.00062EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

WordPress plugin SiteGround Security 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00062EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/30 11:43 a.m.2 views

WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SiteGround Security versions = 1.5.8...

5.3CVSS7AI score0.00062EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-15986

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.03267EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-15985

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.04367EPSS
Exploits3References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-37614

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00092EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:45 a.m.1 views

CVE-2023-0234

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue...

8.8CVSS7.8AI score0.06673EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:29 p.m.7 views

CVE-2022-0993

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

9.8CVSS7.2AI score0.03267EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/11/01 2:17 p.m.11 views

CVE-2024-38774 WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0...

5.4CVSS0.00092EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.4 views

PT-2024-28210 · Siteground · Siteground Security

Name of the Vulnerable Software and Affected Versions: SiteGround Security versions 1.5.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in SiteGround Security, which allows exploiting incorrectly configured access control security levels. Recommendations:...

5.4CVSS6.5AI score0.00092EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.1 views

WordPress plugin SiteGround Security 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.6AI score0.00092EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/07/19 12:21 p.m.4 views

WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin SiteGround Security versions = 1.5.0...

5.4CVSS7AI score0.00092EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2023/04/25 12:0 a.m.9 views

WordPress plugin SiteGround Security 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.3CVSS6.2AI score0.00098EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:0 a.m.24 views

SiteGround Security Plugin for WordPress < 1.3.1 SQL injection

The WordPress SiteGround Security Plugin installed on the remote host is affected by a sql injection vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

8.8CVSS7.7AI score0.06673EPSS
Exploits2References2
Rows per page
Query Builder