CVE-2026-17153: CWE-862 Missing Authorization in siteground AI Agent by SiteGround
Description
The AI Agent by SiteGround WordPress plugin versions up to and including 1.2.7 contains an authorization bypass vulnerability. This flaw allows unauthenticated attackers to upload images to the WordPress media library by circumventing the upload_files capability restriction. The vulnerability arises because the plugin does not properly verify user authorization for certain actions, relying instead on a nonce that is accessible to users with block editor access, including Contributors. This missing authorization check enables attackers to perform actions normally restricted to higher-privileged users.
CVSS v3.1
Score 5.3medium
Affected software
siteground
AI Agent by SiteGround
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-17153 is an authorization bypass vulnerability (CWE-862) in the AI Agent by SiteGround WordPress plugin affecting all versions up to 1.2.7. The plugin fails to properly verify that a user is authorized to perform image uploads, allowing unauthenticated attackers to upload images to the WordPress media library. The vulnerability exists because the endpoint requires a nonce (sg_ai_studio_gutenberg_nonce) that is available to any user with block editor access, including Contributors, but does not enforce the upload_files capability check. This missing authorization check is the sole barrier to exploitation, enabling attackers to bypass normal permission restrictions.
Potential Impact
An attacker without authentication can upload images to the WordPress media library, bypassing the upload_files capability restriction. This could lead to unauthorized content being added to the site, potentially facilitating further attacks or misuse of the media library. The vulnerability does not impact confidentiality or availability directly but allows unauthorized modification (integrity impact).
Mitigation Recommendations
No official patch or fix is currently documented. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict block editor access to trusted users only and monitor for unauthorized media uploads. Avoid granting block editor access to untrusted users to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-07-24T17:36:50.811Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a8692a3acd9273b492a0371
Added to database: 08/20/2026, 05:37:39 UTC
Last enriched: 09/11/2026, 05:32:57 UTC
Last updated: 10/04/2026, 10:02:25 UTC
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.