Skip to content
OpenAdvisories

Vendor

Groundhogg

10 known vulnerabilities.

Products

Groundhogg 7 HollerBox 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.6
    CVE-2026-104408

    WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.

    Groundhogg Groundhogg
  • High 7.1
    CVE-2026-48885

    WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.

    Groundhogg HollerBox
  • High 7.7
    CVE-2026-40727

    WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability

    Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions.

    Groundhogg Groundhogg
  • High 7.1
    CVE-2024-37264

    WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Groundhogg Inc. Groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through 3.4.2.3.

    Groundhogg Groundhogg
  • High 7.6
    CVE-2023-34179

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11.

    Groundhogg Groundhogg