All products
gamipress
WordPress · Plugin31 reports
| Report | Product | Ecosystem | Severity | Fix status | Last updated |
| GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' ParameterCVE-2026-121792 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI <= 8.0.7 - Authenticated (Subscriber+) SQL InjectionCVE-2026-112837 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI < 8.0.6 - Missing AuthorizationCVE-2026-107319 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI 7.9.5 - 8.0.5 - Missing AuthorizationCVE-2026-107320 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'video_id' ParameterCVE-2026-14379 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI <= 8.0.2 - Unauthenticated SQL InjectionCVE-2026-94177 |
gamipress |
WordPress |
High
|
Fix reported |
|
| GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL InjectionCVE-2026-15439 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI < 7.9.9.6 - Missing AuthorizationCVE-2026-77764 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' ShortcodeCVE-2026-16091 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement ShortcodeCVE-2026-16090 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode AttributeCVE-2026-15730 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.9.7 - Unauthenticated SQL InjectionCVE-2026-59538 |
gamipress |
WordPress |
High
|
Fix reported |
|
| GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' ParameterCVE-2026-13450 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.8.7 - Authenticated (Subscriber+) SQL InjectionCVE-2026-48874 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.3 - Missing AuthorizationCVE-2026-24546 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.6.6 - Cross-Site Request ForgeryCVE-2026-32420 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information ExposureCVE-2025-13812 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.4.5 - Authenticated (Administrator+) SQL InjectionCVE-2025-49326 |
gamipress |
WordPress |
Medium
|
Fix reported |
|
| GamiPress <= 7.3.7 - Authenticated (Contributor+) Local File InclusionCVE-2025-47508 |
gamipress |
WordPress |
High
|
Fix reported |
|
| GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby ParameterCVE-2024-13496 |
gamipress |
WordPress |
High
|
Fix reported |
|