Object Injection Flaw in Groundhogg by Adrian Tobey
CVE-2025-54053

6.6MEDIUM

Key Information:

Vendor

WordPress
Status
Groundhogg
Vendor
CVE Published:
20 August 2025

What is CVE-2025-54053?

A vulnerability in Groundhogg by Adrian Tobey involves deserialization of untrusted data, permitting object injection. This can potentially allow attackers to manipulate application behavior and execute harmful code. The issue affects various versions of Groundhogg, highlighting the importance for users to apply security updates and safeguard their applications against malicious exploitation.

Affected Version(s)

Groundhogg <= 4.2.2

References

https://patchstack.com/database/wordpress/plugin/groundho...
vdb-entry

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

63n0 (Patchstack Alliance)
.