Skip to content
OpenAdvisories

Vendor

Adrian Tobey

13 known vulnerabilities.

Adrian Tobey at a glance

Last 12 months
4
Critical · all time
2
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202610
Aug 202600
Jul 202610
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202510
Sep 202500
Aug 202510
Jul 202511
Jun 202510
May 202500
Apr 202510
Mar 202510
Feb 202500
Jan 202520
Dec 202400

Products

Groundhogg 9 FormLift for Infusionsoft Web Forms 3 WordPress SMTP Service, Email Delivery Solved! — MailHawk 1
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • High 7.5
    CVE-2026-104385

    WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.

    Adrian Tobey Groundhogg
  • Medium 6.5
    CVE-2026-85310

    WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability

    import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

    Adrian Tobey Groundhogg
  • High 8.6
    CVE-2026-57389

    WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.

    Adrian Tobey Groundhogg
  • High 8.5
    CVE-2026-57667

    WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability

    Sales Representative SQL Injection in Groundhogg <= 4.5 versions.

    Adrian Tobey Groundhogg
  • Medium 6.5
    CVE-2025-64367

    WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects Groundhogg: from n/a through <= 4.2.6.

    Adrian Tobey Groundhogg
  • Medium 6.6
    CVE-2025-54053

    WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Adrian Tobey Groundhogg groundhogg allows Object Injection.This issue affects Groundhogg: from n/a through <= 4.2.2.

    Adrian Tobey Groundhogg
  • Critical 9.1
    CVE-2025-48300

    WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affects Groundhogg: from n/a through <= 4.2.1.

    Adrian Tobey Groundhogg
  • High 7.1
    CVE-2025-47654

    WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.…

    Adrian Tobey FormLift for Infusionsoft Web Forms
  • High 7.5
    CVE-2025-31015

    WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk mailhawk allows PHP Local File Inclusion.This issue affects WordPre…

    Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk Web / CMS
  • Medium 6.5
    CVE-2025-31434

    WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Stored XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5.1…

    Adrian Tobey FormLift for Infusionsoft Web Forms
  • High 7.1
    CVE-2024-56289 Public exploit

    WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through <= 3.7.3.3.

    Adrian Tobey Groundhogg
  • Medium 4.3
    CVE-2024-37235

    WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Adrian Tobey Groundhogg groundhogg allows Cross Site Request Forgery.This issue affects Groundhogg: from n/a through <= 3.4.2.3.

    Adrian Tobey Groundhogg
  • Critical 9.3
    CVE-2024-38773 Scanner template

    WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.

    Adrian Tobey FormLift for Infusionsoft Web Forms