Groundhogg vulnerabilities

Products

• Groundhogg 16
• Hollerbox 4

Newest

• groundhogg hollerbox WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-106603 6.5 MediumOctober 8, 2026
• adrian tobey groundhogg WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability CVE-2026-104408 7.6 HighOctober 5, 2026
• groundhogg hollerbox WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-48885 7.1 HighJune 15, 2026
• adrian tobey groundhogg WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability CVE-2026-40793 6.5 MediumJune 15, 2026
• adrian tobey groundhogg WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability CVE-2026-40727 7.7 HighJune 15, 2026
• adrian tobey groundhogg WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37235 4.3 MediumJanuary 2, 2025
• adrian tobey groundhogg WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37264 7.1 HighJuly 22, 2024
• adrian tobey groundhogg WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-34178 5.4 MediumNovember 9, 2023
• adrian tobey groundhogg WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection CVE-2023-34179 7.6 HighNovember 3, 2023
• adrian tobey groundhogg WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40681 5.9 MediumOctober 31, 2023
• groundhogg hollerbox WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41657 5.9 MediumSeptember 29, 2023
• groundhogg hollerbox, unknown fast & effective popups & lead-generation for wordpress +1 more HollerBox < 2.1.4 - Admin+ SQL Injection CVE-2023-2111 4.9 MediumMay 30, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins CVE-2023-2717 5.4 MediumMay 20, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation CVE-2023-2736 7.5 HighMay 20, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-2735 4.9 MediumMay 20, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload CVE-2023-2716 5.4 MediumMay 20, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Missing Authorization to Update License CVE-2023-2714 4.3 MediumMay 20, 2023
• groundhogg, trainingbusinesspros groundhogg — crm, newsletters, and marketing automation +1 more Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation CVE-2023-2715 4.3 MediumMay 20, 2023
• groundhogg, trainingbusinesspros wordpress crm, email & marketing automation for wordpress | award winner — groundhogg +1 more Groundhogg Contacts < 2.7.9.4 - Admin+ SQLi CVE-2023-1425 7.2 HighApril 10, 2023
• groundhogg The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action... CVE-2019-15647 8.8 HighAugust 27, 2019