Skip to content
OpenAdvisories

Vendor

Adrian Tobey

13 known vulnerabilities.

6 results · Clear filters · Feed

  • High 7.5

    WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.

  • High 8.6

    WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.

  • High 8.5

    WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability

    Sales Representative SQL Injection in Groundhogg <= 4.5 versions.

  • High 7.1

    WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.…

  • High 7.5

    WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk mailhawk allows PHP Local File Inclusion.This issue affects WordPre…

  • High 7.1
    CVE-2024-56289 Public exploit

    WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through <= 3.7.3.3.