İçeriğe atla
Noroxi

Groundhogg kayıtları

groundhogg üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%40
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2019-15647
    36İzleyin

    The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution.

    YüksekCVSS 8,8İstismar yokEPSS %4

    groundhogg · groundhogg27 Ağu 2019

  • CVE-2023-34178
    35İzleyin

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    groundhogg · groundhogg9 Kas 2023

  • CVE-2023-2736
    32İzleyin

    Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation

    YüksekCVSS 8,0İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2023-1425
    28İzleyin

    Groundhogg Contacts < 2.7.9.4 - Admin+ SQLi

    YüksekCVSS 7,2İstismar yokEPSS %0

    groundhogg · groundhogg10 Nis 2023

  • CVE-2023-34179
    28İzleyin

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    groundhogg · groundhogg3 Kas 2023

  • CVE-2024-37264
    24İzleyin

    WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    groundhogg · groundhogg22 Tem 2024

  • CVE-2023-2735
    21İzleyin

    Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2023-2716
    21İzleyin

    Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload

    OrtaCVSS 5,4İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2023-2111
    19İzleyin

    HollerBox < 2.1.4 - Admin+ SQL Injection

    OrtaCVSS 4,9İstismar yokEPSS %0

    groundhogg · hollerbox30 May 2023

  • CVE-2023-40681
    19İzleyin

    WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    groundhogg · groundhogg31 Eki 2023

  • CVE-2023-41657
    19İzleyin

    WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 4,8İstismar yokEPSS %0

    groundhogg · hollerbox29 Eyl 2023

  • CVE-2023-2715
    17İzleyin

    Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation

    OrtaCVSS 4,3İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2023-2714
    17İzleyin

    Groundhogg <= 2.7.9.8 - Missing Authorization to Update License

    OrtaCVSS 4,3İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2023-2717
    17İzleyin

    Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins

    OrtaCVSS 4,3İstismar yokEPSS %0

    groundhogg · groundhogg19 May 2023

  • CVE-2024-37235
    17İzleyin

    WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    groundhogg · groundhogg2 Oca 2025