Input validation vulnerability in Groundhogg — CRM, Newsletters, and Marketing Automation 4.2.6.1

The Groundhogg plugin for WordPress, which helps with customer relations, newsletters, and marketing automation, has a vulnerability that allows hackers to inject malicious code through the ‘term’ parameter. This can happen in all versions up to 4.2.6.1 because the plugin does not properly protect against user input and does not prepare the SQL query properly. This means that attackers with high-level access can add their own code into existing queries and potentially access sensitive information from the database.