Threat database

13 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.3%	CVE-2026-104385Groundhogg · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-104385 Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. EPSS 0.3%Vulnerability Adrian Tobey #cwe-201	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.4%	CVE-2026-85310Groundhogg · Path Traversal: '.../...//' Medium6.5EPSS 0.4%2026-09-10CVE Database V5CVE-2026-85310 import_contacts Path Traversal in Groundhogg <= 4.7.1 versions. EPSS 0.4%Vulnerability Adrian Tobey #cwe-35	CVE Database V5	2026-09-10
High	8.6	EPSS 0.5%	CVE-2026-57389Groundhogg · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Adrian Tobey… High8.6EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57389 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through <= 4.4.1. EPSS 0.5%Vulnerability Adrian Tobey #cwe-22	CVE Database V5	2026-07-13
High	8.5	EPSS 0.4%	CVE-2026-57667Groundhogg · SQL Injection High8.5EPSS 0.4%2026-06-26CVE Database V5CVE-2026-57667 Sales Representative SQL Injection in Groundhogg <= 4.5 versions. EPSS 0.4%Vulnerability Adrian Tobey #cwe-89	CVE Database V5	2026-06-26
Medium	6.5	EPSS 0.2%	CVE-2025-64367Groundhogg · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Adrian Tobey… Medium6.5EPSS 0.2%2025-10-31CVE Database V5CVE-2025-64367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This issue affects Groundhogg: from n/a through <= 4.2.6. EPSS 0.2%Vulnerability Adrian Tobey	CVE Database V5	2025-10-31
Medium	6.6	EPSS 0.4%	CVE-2025-54053Groundhogg · Deserialization of Untrusted Data Medium6.6EPSS 0.4%2025-08-20CVE Database V5CVE-2025-54053 Deserialization of Untrusted Data vulnerability in Adrian Tobey Groundhogg groundhogg allows Object Injection.This issue affects Groundhogg: from n/a through <= 4.2.2. EPSS 0.4%Vulnerability Adrian Tobey	CVE Database V5	2025-08-20
Critical	9.1	EPSS 0.5%	CVE-2025-48300Groundhogg · Unrestricted Upload of File with Dangerous Type Critical9.1EPSS 0.5%2025-07-16CVE Database V5CVE-2025-48300 Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affects Groundhogg: from n/a through <= 4.2.1. EPSS 0.5%Vulnerability Adrian Tobey	CVE Database V5	2025-07-16
High	7.1	EPSS 0.3%	CVE-2025-47654FormLift for Infusionsoft Web Forms · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Adrian Tobey… High7.1EPSS 0.3%2025-06-27CVE Database V5CVE-2025-47654 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5.20. EPSS 0.3%Vulnerability Adrian Tobey	CVE Database V5	2025-06-27
High	7.5	EPSS 0.9%	CVE-2025-31015WordPress SMTP Service, Email Delivery Solved! — MailHawk · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.9%2025-04-11CVE Database V5CVE-2025-31015 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk mailhawk allows PHP Local File Inclusion.This issue affects WordPress SMTP Service, Email Delivery Solved! — MailHawk: from n/a through <= 1.3.1. EPSS 0.9%Vulnerability Adrian Tobey	CVE Database V5	2025-04-11
Medium	6.5	EPSS 0.2%	CVE-2025-31434FormLift for Infusionsoft Web Forms · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Adrian Tobey… Medium6.5EPSS 0.2%2025-03-28CVE Database V5CVE-2025-31434 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Stored XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5.19. EPSS 0.2%Vulnerability Adrian Tobey	CVE Database V5	2025-03-28
High	7.1	EPSS 0.7%	CVE-2024-56289Groundhogg · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Adrian Tobey… High7.1EPSS 0.7%2025-01-07CVE Database V5CVE-2024-56289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through <= 3.7.3.3. EPSS 0.7%Vulnerability Adrian Tobey	CVE Database V5	2025-01-07
Medium	4.3	EPSS 0.2%	CVE-2024-37235Groundhogg · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37235 Cross-Site Request Forgery (CSRF) vulnerability in Adrian Tobey Groundhogg groundhogg allows Cross Site Request Forgery.This issue affects Groundhogg: from n/a through <= 3.4.2.3. EPSS 0.2%Vulnerability Adrian Tobey	CVE Database V5	2025-01-02
Critical	9.3	EPSS 2.0%	CVE-2024-38773FormLift for Infusionsoft Web Forms · SQL Injection Critical9.3EPSS 2.0%2024-07-22CVE Database V5CVE-2024-38773 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17. EPSS 2.0%Vulnerability Adrian Tobey #cwe-89	CVE Database V5	2024-07-22

Showing 1–13 of 13 results