What’s Vulnerable › Products

siteground Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your siteground Speed Optimizer – The All-In-One Performance-Boosting Plugin version is affected

Latest siteground Speed Optimizer – The All-In-One Performance-Boosting Plugin vulnerabilities

• CVE-2026-15421 — Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes (CVSS 6.4)
• CVE-2019-25217 — SiteGround Optimizer <= 5.0.12 - Missing Authorization (CVSS 9.8)
• CVE-2024-32532 — WordPress Speed Optimizer plugin <= 7.4.6 - Broken Access Control vulnerability (CVSS 5.3)