CVE Intelligence

SiteGround vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SiteGround products: 4 record(s), with severity, exploitation and fixes.

SiteGround Email Marketing 3SiteGround Security 1

Exploited only (KEV) →

CVE-2026-57416 High · 7.1 CWE-79 Jul 13, 2026
WordPress SiteGround Email Marketing plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through <= 1.7.5.
CVE-2026-24547 Medium · 5.3 CWE-862 Jun 26, 2026
WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.
CVE-2025-66121 Medium · 5.3 CWE-862 Dec 16, 2025
WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through <= 1.5.8.
CVE-2025-62912 Medium · 6.5 CWE-79 Oct 26, 2025
WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through <= 1.7.1.