Login Request a demo
GR
Product
Groundhogg
by Groundhogg · last CVE Oct 5, 2026
16
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 0High 7Medium 9Low 0
Severity
All severities16Critical0High7Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Groundhogg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40793
6.5
0%
Jun 15
WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability
Affected: before 4.4.1
CVE-2024-37264
6.1
0%
Jul 22
WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 3.4.3
CVE-2023-2735
5.4
0%
May 20
Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 2.7.9.8
CVE-2023-2716
5.4
0%
May 20
Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload
Affected: through 2.7.9.8
CVE-2023-40681
4.8
0%
Oct 31
WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)
Affected: before 2.7.11.11
CVE-2024-37235
4.3
0%
Jan 2
WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Affected: before 3.4.3
CVE-2023-2717
4.3
0%
May 20
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins
Affected: through 2.7.9.8
CVE-2023-2714
4.3
1%
May 20
Groundhogg <= 2.7.9.8 - Missing Authorization to Update License
Affected: through 2.7.9.8
CVE-2023-2715
4.3
1%
May 20
Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
Affected: through 2.7.9.8
Showing 9