WordPress Plugin Vulnerabilities

Groundhogg < 1.3.5 - Remote Code Execution

Description

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg WordPress plugin was affected by a Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
groundhogg
Fixed in 1.3.5

References

CVE
CVE-2019-15647

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
c02750d9-a663-4863-b19a-6a1f63dc5c04

Timeline

Publicly Published
2019-04-08 (about 6 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-03-18
Title
Ajax Search Lite < 3.11 - Authenticated RCE
Published
2025-02-12
Title
Avada Builder < 3.11.14 - Unauthenticated Arbitrary Shortcode Execution
Published
2023-03-20
Title
JetEngine < 3.1.3.1 - Author+ Remote Code Execution
Published
2023-08-28
Title
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
Published
2019-03-25
Title
Social Warfare <= 3.5.2 - Unauthenticated Remote Code Execution (RCE)