CVE-2025-0394

creationtimestamp| type| source ---|---|--- 2025-01-14 08:28:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113825764299839192 2025-01-14 09:10:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1468 2025-01-14 09:15:52+00:00| seen|...

CVE-2025-0394 Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ghbigfileupload function in all versions up to, and including, 3.7.3.5. This makes it possible for...

CVE-2025-0394 Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ghbigfileupload function in all versions up to, and including, 3.7.3.5. This makes it possible for...