What’s Vulnerable › Products

Groundhogg HollerBox vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Groundhogg HollerBox version is affected

Latest Groundhogg HollerBox vulnerabilities

• CVE-2026-106603 — WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2026-48885 — WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-41657 — WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-2111 — HollerBox < 2.1.4 - Admin+ SQL Injection (CVSS 4.9)