CVE Intelligence

Groundhogg Groundhogg vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Groundhogg Groundhogg: 3 record(s), with affected versions and fixes.

CVE-2026-104408 High · 7.6 CWE-89 Oct 5, 2026
WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.
CVE-2026-40793 Medium · 6.5 CWE-862 Jun 15, 2026
WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.
CVE-2026-40727 High · 7.7 CWE-22 Jun 15, 2026
WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability
Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions.