Groundhogg Update Required
⚠️ SECURITY FIX For Groundhogg 3.1.8 → 3.7.3.5
We are reaching out to inform you about a critical vulnerability in Groundhogg. While there have been no instances of exploitation, your immediate attention is required to ensure the security of your site.
Groundhogg Version 3.1.8 → 3.7.3.5
A reported vulnerability could allow unauthenticated individuals to upload arbitrary files. Fortunately the location of the file upload is limited to a folder that denies direct traffic access, however the presence of these files could pose a risk if downloaded.
We urge you to update your Groundhogg plugin to version 3.7.3.6.
Recommended Action: To protect your site, immediately update your Groundhogg plugin to 3.7.3.6.
Follow these steps:
- Log in to your WordPress dashboard
- From the left-hand navigation menu, select Plugins > Installed Plugins
- Scroll to Groundhogg and select Update Now in the notification bar.
The update will begin automatically; you should receive a confirmation message once it is complete.
*Note: Always make sure you back up your site before updating plugins to avoid any potential issues
If you have any questions or require any further assistance, please don’t hesitate to contact our support team.
Credit to @wcraft and WordFence for practicing responsible disclosure.
Thank you for your immediate attention to this matter,
Adrian Tobey
Founder, Groundhogg Inc.