Unauthenticated Bypass Vulnerability in SiteGround Security Plugin
CVE-2026-82228

8.1HIGH

Key Information:

Vendor

WordPress
Status
Siteground Security
Vendor
CVE Published:
31 August 2026

What is CVE-2026-82228?

An unauthenticated bypass vulnerability has been identified in the SiteGround Security plugin for WordPress, specifically in versions up to 1.6.6. This security flaw allows unauthorized users to bypass certain security mechanisms, potentially leading to unauthorized access to sensitive areas of the site. website administrators are urged to review their plugin versions and apply necessary updates to safeguard their sites against potential exploits.

Affected Version(s)

SiteGround Security <= 1.6.6

References

https://patchstack.com/database/wordpress/plugin/sg-secur...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
.