Known vulnerabilities in Groundhogg

Software: Groundhogg
Software CPE: cpe:2.3:a:trainingbusinesspros:groundhogg:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Groundhogg Groundhogg is affected by 4 known vulnerabilities: 2 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105872 - Unrestricted Upload of File with Dangerous Type
CVE-2025-0394
CWE-434 Medium
No
No
3.7.3.6 19.03.2025 SB2025031944
#VU22281 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.0.9 25.10.2019 SB2019102503
#VU22280 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-15647
CWE-94 High
No
No
1.3.5 25.10.2019 SB2019082717
#VU22279 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.0.1 25.10.2019 SB2019102502