Adrian Tobey

Products

ProductCVEsExploitedLatest
Groundhogg9–Oct 6, 2026
FormLift for Infusionsoft Web Forms3–Jun 27, 2025
WordPress SMTP Service, Email Delivery Solved! — MailHawk1–Apr 11, 2025

Exploited and recent CVEs

  • CVE-2026-104385 High 7.5 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-85310 Medium 6.5 WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability 0.4%
  • CVE-2026-57389 High 8.6 WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-57667 High 8.5 WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability 0.4%
  • CVE-2025-64367 Medium 6.5 WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-54053 Medium 6.6 WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-48300 Critical 9.1 WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-47654 High 7.1 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-31015 High 7.5 WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability 0.9%
  • CVE-2025-31434 Medium 6.5 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-56289 High 7.1 WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.7%
  • CVE-2024-37235 Medium 4.3 WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-38773 Critical 9.3 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability 2.0%