groundhogg_crm_newsletters_and_marketing_automation vulnerabilities

CVEs whose affected-version data names the groundhogg_crm_newsletters_and_marketing_automation package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81741Medium· 4.7

2w ago

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redir…

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redir…

▾ SunlitEPSS 0.29%via NVD