CVE-2026-24547
Deferred Deferred - Pending Action
Unauthenticated Broken Access Control in SiteGround Email Marketing

Publication date: 2026-06-26

Last updated on: 2026-06-26

Assigner: Patchstack

Description
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-26
Last Modified
2026-06-26
Generated
2026-06-26
AI Q&A
2026-06-26
EPSS Evaluated
N/A
NVD
CVE-2026-24547
EUVD
EUVD-2026-39781
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
siteground email_marketing to 1.7.5 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided information does not specify how the CVE-2026-24547 vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

CVE-2026-24547 is a broken access control vulnerability in the WordPress SiteGround Email Marketing Plugin versions 1.7.5 and earlier.

This vulnerability allows unauthenticated users to perform actions that normally require higher privileges because the plugin lacks proper authorization checks.

It is classified under OWASP Top 10 A1: Broken Access Control and has a CVSS score of 5.3, indicating a moderate severity.

Impact Analysis

This vulnerability can allow attackers who are not logged in to perform privileged actions within the SiteGround Email Marketing plugin.

Such unauthorized actions could lead to manipulation or misuse of email marketing functions, potentially impacting the integrity of marketing campaigns.

Although the vulnerability does not impact confidentiality or availability, it can affect the integrity of the system.

Mitigation Strategies

The vulnerability affects SiteGround Email Marketing Plugin versions 1.7.5 and earlier. The immediate step to mitigate this vulnerability is to update the plugin to version 1.7.6, which contains the patch for this broken access control issue.

If updating is not possible immediately, it is recommended to seek assistance from a hosting provider or a web developer to help mitigate the risk.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24547. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart