Adrian Tobey
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Groundhogg | 9 | – | Oct 6, 2026 |
| FormLift for Infusionsoft Web Forms | 3 | – | Jun 27, 2025 |
| WordPress SMTP Service, Email Delivery Solved! — MailHawk | 1 | – | Apr 11, 2025 |
Exploited and recent CVEs
- CVE-2026-104385 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-85310 WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability 0.4%
- CVE-2026-57389 WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability 0.5%
- CVE-2026-57667 WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability 0.4%
- CVE-2025-64367 WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-54053 WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability 0.4%
- CVE-2025-48300 WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability 0.5%
- CVE-2025-47654 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-31015 WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability 0.9%
- CVE-2025-31434 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2024-56289 WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.7%
- CVE-2024-37235 WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-38773 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability 2.0%