CVE Intelligence

Adrian Tobey vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Adrian Tobey products: 5 record(s), with severity, exploitation and fixes.

Groundhogg 5

Exploited only (KEV) →

CVE-2026-104385 High · 7.5 CWE-201 Oct 6, 2026
WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
CVE-2026-85310 Medium · 6.5 CWE-35 Sep 10, 2026
WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
CVE-2026-57389 High · 8.6 CWE-22 Jul 13, 2026
WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.
CVE-2026-57667 High · 8.5 CWE-89 Jun 26, 2026
WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability
Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
CVE-2025-64367 Medium · 6.5 CWE-79 Oct 31, 2025
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects Groundhogg: from n/a through <= 4.2.6.