Approved changes feed: RSS · Atom

cpe:2.3:a:siteground:siteground_security:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSiteground (75ba3050-2314-5687-93e4-1dbfe7f8966a)
ProductSiteground Security (f505d0c5-9051-5db9-ae77-33879eda18b3)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0234 vulnerable 2026-06-08 05:52:04.577010 SiteGround Security < 1.3.1 - Admin+ SQLi
The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
Published: 2023-02-06T19:59:32.911Z
Updated: 2025-03-25T18:09:53.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0993 vulnerable 2026-06-08 05:39:11.618022 SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass
HIGH (8.1)
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and including, 1.2.5.
Published: 2022-04-19T20:26:36.000Z
Updated: 2026-04-08T17:06:18.657Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.