Vulnerability history

Subscriber+ Activity Log Disclosure vulnerability

Unauthenticated Private Activity Log Disclosure vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

SQL Injection vulnerability

Subscriber+ Arbitrary User Points and Achievement Award vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Missing Authorization to Authenticated (Subscriber+) Information Exposure vulnerability

Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function vulnerability

SQL Injection Vulnerability

Local File Inclusion Vulnerability

Unauthenticated SQL Injection via orderby Parameter vulnerability

Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function vulnerability

Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated (Contributor+) SQL Injection via Shortcode vulnerability

Unauthenticated SQL Injection vulnerability

CSRF Leading to Settings Change Vulnerability

Missing Authorization Leading to Points Manipulation Vulnerability

Cross-Site Request Forgery Vulnerability