How many CVEs does Adrian Tobey have?

Adrian Tobey has 11 published CVE records since 2024, including 10 in the last two years.

How many Adrian Tobey CVEs are in CISA KEV?

None of Adrian Tobey's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Adrian Tobey products have the most CVEs?

The Adrian Tobey products with the most published CVEs are Groundhogg, FormLift for Infusionsoft Web Forms, WordPress SMTP Service, Email Delivery Solved! — MailHawk.

What are the most common weakness types in Adrian Tobey CVEs?

Adrian Tobey's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for Adrian Tobey vulnerabilities?

Yes — 1 of Adrian Tobey's CVEs have a known public exploit.

How many critical Adrian Tobey vulnerabilities are there?

Adrian Tobey has 2 critical and 5 high-severity CVEs.

What is the average severity of Adrian Tobey CVEs?

The average CVSS base score across Adrian Tobey's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

11 CVEs

Adrian Tobey Vulnerabilities

Name: Adrian Tobey vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Adrian Tobey.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.4

Avg CVSS

2024–2026

Overview

Adrian Tobey has 11 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Adrian Tobey products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Adrian Tobey's vulnerability posture, as a share of its 11 published CVEs.

Average CVSS: 7.4
Critical / high: 64%
Actively exploited (KEV): 0%
Public exploit available: 9%
Patch available: 100%

Severity and exploitation

How the CVSS severity of Adrian Tobey's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Adrian Tobey's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Adrian Tobey's CVEs has a known public exploit available.

Most affected products

The Adrian Tobey products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Adrian Tobey CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Adrian Tobey CVE records.

Patchstack11 CVEs

Disclosure activity by year

How many Adrian Tobey CVEs were published each year.

2024

1

2025

8

2026

2

Latest Adrian Tobey CVEs

The most recently disclosed vulnerabilities affecting Adrian Tobey.

WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability
CWE-22
High · CVSS 8.6
EPSS 0.5%2026-07-13
WordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability
CWE-89
High · CVSS 8.5
EPSS 0.4%2026-06-26
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2025-10-31
WordPress Groundhogg plugin <= 4.2.2 - PHP Object Injection vulnerability
CWE-502
Medium · CVSS 6.6
EPSS 0.4%2025-08-20
WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability
CWE-434
Critical · CVSS 9.1
EPSS 0.4%2025-07-16
WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability
CWE-79
High · CVSS 7.1
EPSS 0.2%2025-06-27
WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability
CWE-98
High · CVSS 7.5
EPSS 0.8%2025-04-11
WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2025-03-28
WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CWE-79
High · CVSS 7.1
EPSS 0.7%2025-01-07
WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability
CWE-352
Medium · CVSS 4.3
EPSS 0.2%2025-01-02
WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability
CWE-89
Critical · CVSS 9.8
EPSS 2.0%2024-07-22

Track new Adrian Tobey CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Adrian Tobey CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,053 CVEs linux22,545 CVEs Google16,149 CVEs Apple15,069 CVEs Oracle12,706 CVEs Debian10,225 CVEs IBM8,823 CVEs Red Hat8,075 CVEs

Browse all vendors

Frequently asked questions

Common questions about Adrian Tobey vulnerabilities.

How many CVEs does Adrian Tobey have?: Adrian Tobey has 11 published CVE records since 2024, including 10 in the last two years.
How many Adrian Tobey CVEs are in CISA KEV?: None of Adrian Tobey's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Adrian Tobey products have the most CVEs?: The Adrian Tobey products with the most published CVEs are Groundhogg, FormLift for Infusionsoft Web Forms, WordPress SMTP Service, Email Delivery Solved! — MailHawk.
What are the most common weakness types in Adrian Tobey CVEs?: Adrian Tobey's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for Adrian Tobey vulnerabilities?: Yes — 1 of Adrian Tobey's CVEs have a known public exploit.
How many critical Adrian Tobey vulnerabilities are there?: Adrian Tobey has 2 critical and 5 high-severity CVEs.
What is the average severity of Adrian Tobey CVEs?: The average CVSS base score across Adrian Tobey's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Adrian Tobey vulnerabilities

Monitor new Adrian Tobey vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing