A vulnerability was found in trainingbusinesspros Groundhogg Plugin up to 4.5.14 on WordPress. It has been declared as problematic. The impacted element is an unknown function. Such manipulation of the argument ref leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-18548. The attack can be launched remotely. No exploit exists.
WordPress
Vulnerability
CVE-2026-18548
VulDB
Apply vendor security patch