8 matches found
CVE-2026-109221
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales...
EUVD-2026-102655
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales...
CVE-2026-85310
importcontacts Path Traversal in Groundhogg = 4.7.1 versions...
CVE-2026-85310 WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
importcontacts Path Traversal in Groundhogg = 4.7.1 versions...
CVE-2026-85310
A Path Traversal vulnerability exists in the import_contacts function of the Groundhogg WordPress plugin, affecting versions ≤ 4.7.1 . The CVSS 3.1 score is 6.5 (Medium) , indicating a network-attack vector with low complexity, low privileges required, and a high impact on confidentiality but no ...
EUVD-2026-75510
importcontacts Path Traversal in Groundhogg = 4.7.1 versions...
