Skip to content
OpenAdvisories

Vendor

Groundhogg

10 known vulnerabilities.

Products

Groundhogg 7 HollerBox 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-106603

    WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14.

    Groundhogg HollerBox
  • Medium 6.5
    CVE-2026-40793

    WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.

    Groundhogg Groundhogg
  • Medium 5.4
    CVE-2023-34178

    WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11 versions.

    Groundhogg Groundhogg
  • Medium 5.9
    CVE-2023-40681

    WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11.10 versions.

    Groundhogg Groundhogg
  • Medium 5.9
    CVE-2023-41657

    WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions.

    Groundhogg HollerBox