Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Groundhogg — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Groundhogg, with AI-generated Chinese analysis, references, and POCs.

Vendor: Groundhogg Inc.

CVE IDTitleCVSSSeverityPublished
CVE-2025-64367 WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability CWE-79 5.4 -2025-10-31
CVE-2025-54053 WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability CWE-502 6.6 Medium2025-08-20
CVE-2025-48300 WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability CWE-434 9.1 Critical2025-07-16
CVE-2024-56289 WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-01-07
CVE-2024-37235 WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2025-01-02
CVE-2024-37264 WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-07-22
CVE-2023-34178 WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 8.8 -2023-11-09
CVE-2023-34179 WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection CWE-89 9.8 -2023-11-03
CVE-2023-40681 WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2023-10-31

All 9 known CVE vulnerabilities affecting Groundhogg with full Chinese analysis, references, and POCs where available.