Groundhogg HollerBox

• CVE-2026-106603 Medium 6.5 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability 0.2%
• CVE-2026-48885 High 7.1 WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability 0.2%