CVE-2026-104725 - Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter
CVE ID :CVE-2026-104725 Published : Oct. 10, 2026, 6:16 a.m. | 1 hour, 13 minutes ago Description :The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing...