Gamerz vulnerabilities

Products

• Wp-downloadmanager 7
• Wp-polls 3
• Wp-stats 2
• Wp-useronline 2

Newest

• gamerz wp-stats WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting CVE-2026-19794 Public exploit 7.2 HighAugust 14, 2026
• gamerz wp-downloadmanager wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal CVE-2026-18933 7.2 HighAugust 5, 2026
• gamerz wp-polls WordPress WP-Polls plugin <= 2.77.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-68081 5.9 MediumJuly 23, 2026
• gamerz wp-downloadmanager WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter CVE-2026-2426 6.5 MediumFebruary 18, 2026
• gamerz wp-downloadmanager WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter CVE-2026-2419 2.7 LowFebruary 18, 2026
• gamerz wp-downloadmanager WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload CVE-2025-10747 7.2 HighSeptember 26, 2025
• gamerz wp-downloadmanager WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion CVE-2025-4799 7.2 HighJune 11, 2025
• gamerz wp-downloadmanager WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read CVE-2025-4798 4.9 MediumJune 11, 2025
• gamerz wp-polls WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting CVE-2024-13426 5.4 MediumJanuary 22, 2025
• gamerz wp-downloadmanager WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47341 7.1 HighOctober 6, 2024
• gamerz wp-postratings GamerZ WP-PostRatings wp-postratings.php cross site scripting CVE-2011-10006 3.5 LowApril 8, 2024
• gamerz wp-polls WP-Polls < 2.76.0 - IP Validation Bypass CVE-2022-1581 5.3 MediumNovember 21, 2022
• gamerz wp-useronline WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-2941 Public exploit 5.5 MediumSeptember 6, 2022
• gamerz wp-useronline WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-2473 5.5 MediumSeptember 6, 2022
• gamerz wp-stats SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to... CVE-2006-0238 7.5 HighJanuary 18, 2006