Adrian Tobey

11 CVEs across 3 Adrian Tobey products. Browse Adrian Tobey vulnerabilities, severities, and proof-of-concept exploits.

Adrian Tobey products with known CVEs

ProductCVEs
Groundhogg7
Formlift For Infusionsoft Web Forms3
WordPress Smtp Service, Email Delivery Solved! — Mailhawk1
Adrian Tobey CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57389High8.62026-07-13Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This i…
CVE-2026-57667High8.52026-06-26Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
CVE-2025-64367Medium6.52025-10-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Stored XSS.This…
CVE-2025-54053Medium6.62025-08-20Deserialization of Untrusted Data vulnerability in Adrian Tobey Groundhogg groundhogg allows Object Injection.This issue affects Groundhogg: from n/a through <…
CVE-2025-48300Critical9.12025-07-16Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web Shell to a Web Server.This issue affect…
CVE-2025-47654High7.12025-06-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift…
CVE-2025-31015High7.52025-04-11Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, E…
CVE-2025-31434Medium6.52025-03-28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift…
CVE-2024-56289High7.12025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey Groundhogg groundhogg allows Reflected XSS.T…
CVE-2024-37235Medium4.32025-01-02Cross-Site Request Forgery (CSRF) vulnerability in Adrian Tobey Groundhogg groundhogg allows Cross Site Request Forgery.This issue affects Groundhogg: from n/a…
CVE-2024-38773Critical9.32024-07-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows B…