Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Groundhogg — CRM, Newsletters, and Marketing Automation — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Groundhogg — CRM, Newsletters, and Marketing Automation, with AI-generated Chinese analysis, references, and POCs.

Vendor: trainingbusinesspros

CVE IDTitleCVSSSeverityPublished
CVE-2025-12750 Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection CWE-89 4.9 Medium2025-11-21
CVE-2025-4206 WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File Deletion CWE-22 7.2 High2025-05-09
CVE-2025-1267 Groundhogg <= 3.7.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter CWE-79 5.5 Medium2025-04-01
CVE-2025-0394 Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function CWE-434 8.8 High2025-01-14
CVE-2023-2717 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins CWE-352 5.4 Medium2023-05-20
CVE-2023-2736 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation CWE-352 7.5 High2023-05-20
CVE-2023-2735 Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 4.9 Medium2023-05-20
CVE-2023-2716 Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload CWE-862 5.4 Medium2023-05-20
CVE-2023-2714 Groundhogg <= 2.7.9.8 - Missing Authorization to Update License CWE-862 4.3 Medium2023-05-20
CVE-2023-2715 Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation CWE-862 4.3 Medium2023-05-20

All 10 known CVE vulnerabilities affecting Groundhogg — CRM, Newsletters, and Marketing Automation with full Chinese analysis, references, and POCs where available.