SiteGround Email Marketing
SiteGround Email Marketing has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
Every one of the 3 issues recorded for SiteGround Email Marketing has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. SiteGround Email Marketing is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-57416SiteGround Email Marketing <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

SiteGround Email Marketing
Author
SiteGround
SiteGround Email Marketing plugin is a lead generation plugin for WordPress that allows you to create subscriptions forms and use them for automatic lead submission to SiteGround Email Marketing service. The plugin also allows you to add a subscription option to some already created contact forms, comment and sign up processes. By using this plugin as a supplementary tool to SiteGround Email Marketing service you may easily turn your website visitors into mailing list subscribers. Features Integration with SiteGround Email Marketing: Use this plugin to link your WordPress site with the SiteGround Email Marketing service and seamlessly grow your mailing list. User-Friendly Interface: Our plugin is designed with simplicity in mind, ensuring that even beginners can easily set up and manage their email marketing forms. Customizable Forms: Create beautiful and highly customizable forms to match the look and feel of your website. Responsive Design: All forms are mobile-responsive, ensuring they look great and function perfectly on all devices. Seamless Integrations: Instantly connect this plugin to begin capturing leads through various channels including the WP comment form, registration pages, Contact Form 7, Elementor Pro Forms, WPForms, Ninja Forms, Gravity Forms and more. Requirements In order to work correctly, this plugin requires that your server meets the following criteria: WordPress 4.7 PHP 7.0+ Our plugin uses a cookie in order to function properly. It does not store personal data and is used solely for the needs of our caching system.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C