İçeriğe atla
Noroxi

Groundhogg — CRM, Newsletters, and Marketing Automation

groundhogg · eklenti

Groundhogg — CRM, Newsletters, and Marketing Automation için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

31 bilinen açık

1 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 10 Eyl 2026

Güvenlik açıkları

  • CVE-2025-48300

    WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability

    Kritik 9.1

  • CVE-2025-0394

    Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

    Yüksek 8.8

  • CVE-2023-34178

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)

    Yüksek 8.8

  • CVE-2019-15647

    The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution.

    Yüksek 8.8

  • CVE-2026-57389

    WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

    Yüksek 8.6

  • CVE-2026-57667

    WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability

    Yüksek 8.5

  • CVE-2023-2736

    Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation

    Yüksek 8.0

  • CVE-2026-40727

    WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability

    Yüksek 7.7

  • CVE-2025-4206

    WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File Deletion

    Yüksek 7.2

  • CVE-2023-34179

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection

    Yüksek 7.2

  • CVE-2024-56289

    WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2025-54053

    WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability

    Orta 6.6

  • CVE-2026-85310

    WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability

    Orta 6.5

  • CVE-2026-18387

    Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter

    Orta 6.5

  • CVE-2026-11454

    Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Reference

    Orta 6.5

  • CVE-2026-14029

    Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter

    Orta 6.5

  • CVE-2026-13333

    Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter

    Orta 6.5

  • CVE-2026-13331

    Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter

    Orta 6.5

  • CVE-2026-13226

    Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter

    Orta 6.5

  • CVE-2026-40793→ 4.4.1

    WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability

    Orta 6.5

  • CVE-2025-64367

    WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2024-37264

    WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Orta 6.1

  • CVE-2025-1267

    Groundhogg <= 3.7.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter

    Orta 5.5

  • CVE-2023-2735

    Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 5.4

  • CVE-2023-2716

    Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload

    Orta 5.4

  • CVE-2025-12750

    Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection

    Orta 4.9

  • CVE-2023-40681

    WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)

    Orta 4.8

  • CVE-2024-37235

    WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Orta 4.3

  • CVE-2023-2717

    Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins

    Orta 4.3

  • CVE-2023-2715

    Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation

    Orta 4.3

  • CVE-2023-2714

    Groundhogg <= 2.7.9.8 - Missing Authorization to Update License

    Orta 4.3

← Dizine dön