Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Adrian Tobey Clear all filters
TI-2026-41326 CVE-2026-57389 · GHSA-q6j2-fc4h-j38q

WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00533 Published 2026-07-13 No fix listed CWE-22
TI-2025-39800 CVE-2025-64367 · GHSA-qw73-cw24-3jmw

WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects Groundhogg: from n/a through <= 4.2.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-31 No fix listed CWE-79
TI-2025-33898 CVE-2025-54053 · GHSA-c9jc-jv3w-6j48

WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability

Priority LOW 31

Deserialization of Untrusted Data vulnerability in Adrian Tobey Groundhogg groundhogg allows Object Injection.This issue affects Groundhogg: from n/a through <= 4.2.2.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00359 Published 2025-08-20 No fix listed CWE-502
TI-2025-30626 CVE-2025-48300 · GHSA-hcq9-76gq-cf56

WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affects Groundhogg: from n/a through <= 4.2.1.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00497 Published 2025-07-16 No fix listed CWE-434
TI-2025-30151 CVE-2025-47654 · GHSA-59j6-fwr7-4993

WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusio…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00252 Published 2025-06-27 No fix listed CWE-79
TI-2025-22285 CVE-2025-31015 · GHSA-jr96-v85m-7xhc

WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk mailhawk allows PHP Local Fi…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00916 Published 2025-04-11 No fix listed CWE-98
TI-2025-22615 CVE-2025-31434 · GHSA-fg4p-8xwr-5p2r

WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Stored XSS.This issue affects FormLift for Infusionso…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00214 Published 2025-03-28 No fix listed CWE-79