CVE-2026-81741

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin versions before 4.7.2 are vulnerable to an open redirect via its email preference confirmation flow. The redirect_to parameter is not restricted to the site's own host, allowing an unauthenticated attacker to redirect vi...