GamiPress
Ruben Garcia
Developer
7.7.2
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
16 patched
6 Mitigation rules
- Cross Site Request Forgery (CSRF) vulnerability<= 7.6.6Feb 26, 2026
- Missing Authorization to Authenticated (Subscriber+) Information Exposure vulnerability<= 7.6.1Jan 5, 2026
- Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function vulnerability<= 7.2.1Dec 31, 2025
- SQL Injection Vulnerability<= 7.4.5Jun 5, 2025
- Local File Inclusion Vulnerability<= 7.3.7May 7, 2025
- Unauthenticated SQL Injection via orderby Parameter vulnerability<= 7.2.1Jan 21, 2025
- Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function vulnerability<= 7.2.1Jan 21, 2025
- Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings vulnerability<= 7.1.5Nov 19, 2024
- Broken Access Control vulnerability< 6.8.9Apr 29, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 6.8.5Mar 28, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 6.9.0Mar 28, 2024
- Authenticated (Contributor+) SQL Injection via Shortcode vulnerability<= 6.8.6Mar 20, 2024
- Unauthenticated SQL Injection vulnerability<= 2.5.7Feb 14, 2023
- CSRF Leading to Settings Change Vulnerability<= 2.5.6Feb 13, 2023
- Missing Authorization Leading to Points Manipulation Vulnerability<= 2.5.6Feb 13, 2023
- Cross-Site Request Forgery Vulnerability<= 2.5.0Jan 14, 2023