← العودة للجدول
CVE-2026-109221
CVE-2026-109221 — The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPre
📅 2026-10-16
🟠 High 🔥 No NVD Vulnerability WordPress CVSS 8.1

📋 الوصف الكامل

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level access and above, to delete arbitrary files on the server, which can easily lead

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-109221

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.9.3

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←