SiteGround vulnerabilities
We track 3 vulnerabilities in SiteGround products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
Latest SiteGround vulnerabilities
- 7.1 High severity
SiteGround Email Marketing: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through <= 1.7.5.
- 9.8 Critical severity
Security Optimizer – The All-In-One Protection…: Missing Authentication for Critical Functionality
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success.
- 9.8 Critical severity
Security Optimizer – The All-In-One Protection…: Missing Authentication for Critical Functionality
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized user