https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:15:38.816125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2714 CVE-2023-2714 — Groundhogg <= 2.7.9.8 - Missing Authorization to Update License 2026-10-13T07:15:38.817205+00:00

Affected: trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation

The Groundhogg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'check_license' functions in versions up to, and including, 2.7.9.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change the license key and support license key, but it can only be changed to a valid license key.