agentprime: trainingbusinesspros-groundhogg-crm-newsletters-and-marketing-automationEvery new CVE for trainingbusinesspros-groundhogg-crm-newsletters-and-marketing-automation.https://agentprime.io/CVE-2026-109221: Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mappinghttps://agentprime.io/advisories/CVE-2026-109221/https://agentprime.io/advisories/CVE-2026-109221/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 04:27:05 GMTCVECVE-2026-18548: Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameterhttps://agentprime.io/advisories/CVE-2026-18548/https://agentprime.io/advisories/CVE-2026-18548/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 05:30:22 GMTCVECVE-2026-92975: Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusionhttps://agentprime.io/advisories/CVE-2026-92975/https://agentprime.io/advisories/CVE-2026-92975/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:03 GMTCVECVE-2026-104725: Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameterhttps://agentprime.io/advisories/CVE-2026-104725/https://agentprime.io/advisories/CVE-2026-104725/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:30:59 GMTCVECVE-2026-97644: Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /…https://agentprime.io/advisories/CVE-2026-97644/https://agentprime.io/advisories/CVE-2026-97644/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 03:25:44 GMTCVECVE-2026-18387: Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameterhttps://agentprime.io/advisories/CVE-2026-18387/https://agentprime.io/advisories/CVE-2026-18387/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 03:25:56 GMTCVECVE-2026-11454: Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Referencehttps://agentprime.io/advisories/CVE-2026-11454/https://agentprime.io/advisories/CVE-2026-11454/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 06:37:56 GMTCVECVE-2026-14029: Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameterhttps://agentprime.io/advisories/CVE-2026-14029/https://agentprime.io/advisories/CVE-2026-14029/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 08:33:08 GMTCVECVE-2026-13333: Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameterhttps://agentprime.io/advisories/CVE-2026-13333/https://agentprime.io/advisories/CVE-2026-13333/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Jun 2026 01:27:21 GMTCVECVE-2026-13331: Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameterhttps://agentprime.io/advisories/CVE-2026-13331/https://agentprime.io/advisories/CVE-2026-13331/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Jun 2026 01:27:20 GMTCVECVE-2026-13226: Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameterhttps://agentprime.io/advisories/CVE-2026-13226/https://agentprime.io/advisories/CVE-2026-13226/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 01:27:45 GMTCVECVE-2025-12750: Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injectionhttps://agentprime.io/advisories/CVE-2025-12750/https://agentprime.io/advisories/CVE-2025-12750/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 09:27:02 GMTCVECVE-2025-4206: WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File Deletionhttps://agentprime.io/advisories/CVE-2025-4206/https://agentprime.io/advisories/CVE-2025-4206/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 May 2025 11:11:19 GMTCVECVE-2025-1267: Groundhogg <= 3.7.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameterhttps://agentprime.io/advisories/CVE-2025-1267/https://agentprime.io/advisories/CVE-2025-1267/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 06:52:05 GMTCVECVE-2025-0394: Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Functionhttps://agentprime.io/advisories/CVE-2025-0394/https://agentprime.io/advisories/CVE-2025-0394/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 08:23:14 GMTCVECVE-2023-2717: Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Pluginshttps://agentprime.io/advisories/CVE-2023-2717/https://agentprime.io/advisories/CVE-2023-2717/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:24 GMTCVECVE-2023-2736: Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-2736/https://agentprime.io/advisories/CVE-2023-2736/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:23 GMTCVECVE-2023-2735: Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-2735/https://agentprime.io/advisories/CVE-2023-2735/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:22 GMTCVECVE-2023-2716: Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2023-2716/https://agentprime.io/advisories/CVE-2023-2716/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:22 GMTCVECVE-2023-2714: Groundhogg <= 2.7.9.8 - Missing Authorization to Update Licensehttps://agentprime.io/advisories/CVE-2023-2714/https://agentprime.io/advisories/CVE-2023-2714/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:20 GMTCVECVE-2023-2715: Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creationhttps://agentprime.io/advisories/CVE-2023-2715/https://agentprime.io/advisories/CVE-2023-2715/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 20 May 2023 02:03:18 GMTCVE