Log in Start free

Groundhogg

Products

ProductCVEsExploitedLatest
Groundhogg3–Oct 5, 2026
HollerBox2–Oct 8, 2026

Exploited and recent CVEs

  • CVE-2026-106603 Medium 6.5 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-104408 High 7.6 WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability 0.3%
  • CVE-2026-48885 High 7.1 WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-40793 Medium 6.5 WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-40727 High 7.7 WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability 0.3%