Groundhogg Hollerbox
3 CVEs affecting Groundhogg Hollerbox. Latest disclosed: 2026-06-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48885 | High | 7.1 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. |
CVE-2023-41657 | Medium | 5.9 | 2023-09-29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions. |
CVE-2023-2111 | Medium | 4.9 | 2023-05-30 | The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plug… |