CVE-2023-2716

The Groundhogg plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'ajax_upload_file' function in versions up to, and including, 2.7.9.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload a file to the contact, and then lists all the other uploaded files related to the contact.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/groundhogg/tags/2.7.9.8/admin/contacts/contacts-page.php#L458Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2914493/groundhogg/tags/2.7.10/admin/contacts/contacts-page.phpThird Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3c5bde0e-3138-4995-92ae-6deaf6b7be5b?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/groundhogg/tags/2.7.9.8/admin/contacts/contacts-page.php#L458Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2914493/groundhogg/tags/2.7.10/admin/contacts/contacts-page.phpThird Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3c5bde0e-3138-4995-92ae-6deaf6b7be5b?source=cveThird Party Advisory

Published

May 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27149A stored cross-site scripting (XSS) vulnerability in Enhance…4.8
• CVE-2023-2715The Groundhogg plugin for WordPress is vulnerable to unautho…4.3
• CVE-2023-27150openCRX 5.2.0 was discovered to contain a cross-site scripti…5.4
• CVE-2023-27151openCRX 5.2.0 was discovered to contain an HTML injection vu…6.1
• CVE-2023-27152DECISO OPNsense 23.1 does not impose rate limits for authent…9.8
• CVE-2023-27159Appwrite up to v1.2.1 was discovered to contain a Server-Sid…7.5
• CVE-2023-27160forem up to v2022.11.11 was discovered to contain a Server-S…7.2
• CVE-2023-27161Jellyfin up to v10.7.7 was discovered to contain a Server-Si…7.5
• CVE-2023-27162openapi-generator up to v6.4.0 was discovered to contain a S…9.1
• CVE-2023-27163request-baskets up to v1.2.1 was discovered to contain a Ser…6.5
• CVE-2023-27164An arbitrary file upload vulnerability in Halo up to v1.6.1 …4.8
• CVE-2023-27167Suprema BioStar 2 v2.8.16 was discovered to contain a SQL in…6.5