Groundhogg vulnerabilities
We track 3 vulnerabilities in Groundhogg products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2026.
Latest Groundhogg vulnerabilities
- 7.6 High severity
Groundhogg: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.
- 7.2 High severity
Groundhogg: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11.
- 8.0 High severity
Groundhogg — CRM, Newsletters, and Marketing…: Cross-Site Request Forgery
The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.8. This is due to missing nonce validation in the 'ajax_edit_contact' function. This makes it possible for authenticated attackers to receiv