CVE-2023-0234

SiteGround Security < 1.3.1 - Admin+ SQLi

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

Affected

SiteGround Security

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

17.99% chance of exploitation in the next 30 days, 97th percentile

Published

2023-02-06

Updated

2025-03-25

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1

Security advisories

• namah-age/CVEs/blob/master/1.md
• https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en

References

• CVE Record
• NVD entry