What’s Vulnerable › Products

Groundhogg — CRM, Newsletters, and Marketing Automation vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Groundhogg — CRM, Newsletters, and Marketing Automation version is affected

Latest Groundhogg — CRM, Newsletters, and Marketing Automation vulnerabilities

• CVE-2026-81741 — Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter (CVSS 4.7)
• CVE-2026-81660 — Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field (CVSS 8.8)