Siteguard Vulnerabilities

The SiteGuard WP Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user ac...

CVSS:

7.2

Affected:

up to 1.8.6

Fixed in:

1.8.7

Disclosed:

Aug 8, 2026

CVE-2026-61982 on NVD →

The SiteGuard WP Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.7.9. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.7.9

Fixed in:

1.7.10

Disclosed:

Feb 23, 2026

CVE-2026-27411 on NVD →

The SiteGuard WP Plugin plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.7.6. This is due to the plugin not restricting redirects from wp-register.php which may disclose the login page URL. This makes it possible for unauthenticated attackers to gain access to th...

CVSS:

5.3

Affected:

up to 1.7.6

Fixed in:

1.7.7

Disclosed:

Jun 21, 2024

CVE-2024-37881 on NVD →