PT-2026-52720 · Siteground+1 · Siteground Email Marketing

Nabil Irawan · CVE-2026-24547 · Published 2026-06-25 · Updated 2026-06-26

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SiteGround Email Marketing versions prior to 1.7.6

Description The SiteGround Email Marketing plugin for WordPress contains a broken access control issue. A missing capability check in a function allows unauthenticated attackers to perform unauthorized actions.

Recommendations Update SiteGround Email Marketing to version 1.7.6 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24547

Affected Products

Siteground Email Marketing

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24547 · Security Note
• https://patchstack.com/database/wordpress/plugin/siteground-email-marketing/vulnerability/wordpress-siteground-email-marketing-plugin-1-7-5-broken-access-control-vulnerability?_s_id=cve · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24547 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/b29dbd24-6c63-46d8-b245-7194cab17624?source=api-prod · Note