Gamipress vulnerabilities

Products

• Gamipress 13

Newest

• gamipress - reset user, ruben garcia gamipress +1 more GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF CVE-2024-8245 4.3 MediumMay 15, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter CVE-2024-13496 7.5 HighJanuary 22, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function CVE-2024-13499 7.3 HighJanuary 22, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function CVE-2024-13495 7.3 HighJanuary 22, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings CVE-2024-11036 7.3 HighNovember 19, 2024
• gamipress WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability CVE-2023-25697 5.4 MediumJune 19, 2024
• rubengc gamipress – link, gamipress - link +1 more GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5536 6.4 MediumJune 5, 2024
• gamipress GamiPress < 6.8.9 - Broken Access Control CVE-2024-2505 8.1 HighApril 29, 2024
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2783 6.4 MediumApril 9, 2024
• gamipress WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30455 4.3 MediumMarch 29, 2024
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-1799 8.8 HighMarch 20, 2024
• gamipress, rubengc gamipress – button +1 more GamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2460 6.4 MediumMarch 20, 2024
• gamipress, gamipress – the #1 gamification plugin to reward points, achievements, badges & ranks in wordpress, rubengc gamipress – the #1 gamification plugin to reward points, achievements, badges & ranks in wordpress +2 more WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control CVE-2023-25715 5.4 MediumDecember 19, 2023
• gamipress WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection CVE-2023-24000 8.2 HighOctober 31, 2023
• gamipress GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS CVE-2023-0154 5.4 MediumFebruary 6, 2023