Advisories · Technology

Groundhogg.

Every CVE that names Groundhogg among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104408 CVE record

CVSS 7.6 High

WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
- Groundhogg
- SQL injection
Not analysed yet 5 Oct 2026
CVE-2026-40793 CVE record

CVSS 6.5 Medium

WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability
- Groundhogg
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2026-40727 CVE record

CVSS 7.7 High

WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability
- Groundhogg
- Path traversal
Not analysed yet 15 Jun 2026
CVE-2024-37264 CVE record

CVSS 7.1 High

WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Groundhogg
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024
CVE-2023-34178 CVE record

CVSS 5.4 Medium

WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)
- Groundhogg
- Cross-site request forgery (CSRF)
Not analysed yet 9 Nov 2023
CVE-2023-34179 CVE record

CVSS 7.6 High

WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection
- Groundhogg
- SQL injection
Not analysed yet 3 Nov 2023
CVE-2023-40681 CVE record

CVSS 5.9 Medium

WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)
- Groundhogg
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2023