CVE-2026-81660

Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin (versions before 4.5.13 ) is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is that values submitted to optional web form dropdown/radio fields are not validated or escaped before being stor...