WordPress Plugin Vulnerabilities | Page 44 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - CSRF

Slug

Published

2023-05-30

Title

Groundhogg < 2.7.11.1 - Admin+ SQLi

Slug

Published

2024-06-21

Title

Groundhogg < 3.4.3 - Cross-Site Request Forgery

Slug

Published

2024-06-27

Title

Groundhogg < 3.4.3 - Reflected Cross-Site Scripting

Slug

Published

2025-01-03

Title

Groundhogg < 3.7.3.4 - Reflected Cross-Site Scripting

Slug

Published

2025-01-13

Title

Groundhogg < 3.7.3.6 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function

Slug

Published

2025-03-31

Title

Groundhogg < 4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter

Slug

Published

2025-05-08

Title

WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 4.1.2 - Authenticated (Administrator+) Arbitrary File Deletion

Slug

Published

2025-07-04

Title

Groundhogg < 4.2.2 - Authenticated (Sales Rep+) Arbitrary File Upload

Slug

Published

2025-08-05

Title

Groundhogg < 4.2.2.1 - Authenticated (Sales Representative+) PHP Object Injection

Slug

Published

2025-10-31

Title

Groundhogg < 4.2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-11-20

Title

Groundhogg < 4.2.7 - Authenticated (Admin+) SQL Injection

Slug

Published

2026-04-16

Title

Groundhogg — CRM, Newsletters, and Marketing Automation < 4.4.1 - Authenticated (Sales Representative+) Arbitrary File Deletion

Slug

Published

2026-04-24

Title

Groundhogg — CRM, Newsletters, and Marketing Automation < 4.4.1 - Missing Authorization

Slug

Published

2026-06-26

Title

Groundhogg < 4.5.6 - Authenticated (Marketer+) SQL Injection via 'search' Parameter

Slug

Published

2026-06-25

Title

Groundhogg < 4.5.5 - Authenticated (Custom+) SQL Injection via 'after' Parameter

Slug

Published

2026-06-26

Title

Groundhogg < 4.5.6 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter

Slug

Published

2026-06-26

Title

Groundhogg — CRM, Newsletters, and Marketing Automation < 4.5.1 - Authenticated (Sales representative+) SQL Injection

Slug

Published

2026-07-01

Title

Groundhogg < 4.5.9 - Authenticated (Custom+) SQL Injection via 'select' Parameter

Slug

Published

2026-07-08

Title

Groundhogg — CRM, Newsletters, and Marketing Automation < 4.5 - Authenticated (Sales Representative+) Arbitrary File Deletion

Slug

Published

2026-08-04

Title

Groundhogg — CRM, Newsletters, and Marketing Automation < 4.5.3 - Insecure Direct Object Reference

Slug

Published

2026-08-14

Title

Groundhogg < 4.5.15 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter

Slug

Published

2026-08-28

Title

Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field

Slug

group-category-creator

Published

2025-01-16

Title

Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting

Slug

groupdocs-comparison

Published

2014-08-01

Title

GroupDocs Comparison <= 1.0.2 - Multiple Parameter XSS