CVE-2023-0234
Published Feb 6, 2023The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
Vendor/product archive
2 CVEs tagged to siteground / siteground_security — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity ver…