GR
Product
Groundhogg
by Adrian Tobey · last CVE Oct 6, 2026
9
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 4Low 0
Watch

Add Groundhogg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54053
6.6
0%
Aug 20
WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability
Affected: through 4.2.2
CVE-2026-85310
6.5
0%
Sep 10
WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
Affected: through 4.7.1
CVE-2025-64367
6.5
0%
Oct 31
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.2.6
CVE-2024-37235
4.3
0%
Jan 2
WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 3.4.2.3
Showing 4