Groundhogg CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-57389

WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Adrian Tobey Wordpress

Products

Groundhogg Wordpress

CVE-2026-104385

WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Adrian Tobey Wordpress-extensions

Products

Groundhogg Groundhogg

CVE-2026-85310

WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability

import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Adrian Tobey Wordpress

Products

Groundhogg Wordpress

CVE-2026-57667

WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability

Sales Representative SQL Injection in Groundhogg <= 4.5 versions.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Adrian Tobey Wordpress

Products

Groundhogg Wordpress

Page 1 of 1.