Advisories · Technology
Adrian Tobey Groundhogg.
Every CVE that names Adrian Tobey Groundhogg among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
- Adrian Tobey Groundhogg
- Information disclosure
- CVSS 6.5 Medium
WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
- Adrian Tobey Groundhogg
- Path traversal
- CVSS 8.6 High
WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability
- Adrian Tobey Groundhogg
- Path traversal
- CVSS 8.5 High
WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability
- Adrian Tobey Groundhogg
- SQL injection
- CVSS 6.5 Medium
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
- Adrian Tobey Groundhogg
- Cross-site scripting (XSS)
- CVSS 6.6 Medium
WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability
- Adrian Tobey Groundhogg
- Insecure deserialization
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability
- Adrian Tobey Groundhogg
- Unrestricted file upload
- CVSS 7.1 High
WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Adrian Tobey Groundhogg
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability
- Adrian Tobey Groundhogg
- Cross-site request forgery (CSRF)