WordPress Plugin Vulnerabilities | Page 37 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

groovy-menu-free

Published

2025-09-26

Title

Groovy Menu <= 1.4.3 - Cross-Site Request Forgery

Slug

grou-random-image-widget

Published

2014-08-01

Title

grou-r&om-image-widget - Full Path Disclosure

Slug

Published

2019-04-08

Title

Groundhogg < 1.3.5 - Remote Code Execution

Slug

Published

2019-10-23

Title

Groundhogg < 1.3.11.8 - Authenticated SQL Injection

Slug

Published

2019-10-23

Title

Groundhogg < 2.0.9.11 - Authenticated Reflected XSS

Slug

Published

2023-03-20

Title

Groundhogg Contacts < 2.7.9.4 - Admin+ SQLi

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Disable All Plugins via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Contributor+ Stored XSS

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Ticket Creation via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Privilege Escalation via CSRF

Slug

Published

2023-05-19

Title

Groundhogg < 2.7.10 - Lack of Authorization for Non-Arbitrary File upload

Slug

Published

2023-10-25

Title

Groundhogg < 2.7.11.11 - Admin+ Stored XSS

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - CSRF

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - Admin+ SQLi

Slug

Published

2024-06-21

Title

Groundhogg < 3.4.3 - Cross-Site Request Forgery

Slug

Published

2024-06-27

Title

Groundhogg < 3.4.3 - Reflected Cross-Site Scripting

Slug

Published

2025-01-03

Title

Groundhogg < 3.7.3.4 - Reflected Cross-Site Scripting

Slug

Published

2025-01-13

Title

Groundhogg < 3.7.3.6 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

Slug

Published

2025-03-31

Title

Groundhogg < 4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter

Slug

Published

2025-05-08

Title

WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 4.1.2 - Authenticated (Administrator+) Arbitrary File Deletion

Slug

Published

2025-07-04

Title

Groundhogg < 4.2.2 - Authenticated (Sales Rep+) Arbitrary File Upload

Slug

Published

2025-08-05

Title

Groundhogg < 4.2.2.1 - Authenticated (Sales Representative+) PHP Object Injection

Slug

Published

2025-10-31

Title

Groundhogg < 4.2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-11-20

Title

Groundhogg < 4.2.7 - Authenticated (Admin+) SQL Injection

Slug

group-category-creator

Published

2025-01-16

Title

Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting