Rubengc vulnerabilities

Products

• Gamipress – Gamification Plugin To Reward Points, Achievements, Badges & Ranks In Wordpress 11
• Automatorwp – Automator Plugin For No-code Automations, Webhooks & Custom Integrations In Wordpress 6
• Gamipress – Gamification Plugin To Reward Points, Badges & Ranks In Wordpress, Now With Ai 3
• Automatorwp – No-code Workflow Automation, Integration & Webhooks Plugin, Now With Ai 2

Newest

• rubengc automatorwp – no-code workflow automation, integration & webhooks plugin, now with ai AutomatorWP <= 6.0.4 - Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option CVE-2026-104768 7.5 HighNovember 7, 2026
• rubengc gamipress – gamification plugin to reward points, badges & ranks in wordpress, now with ai GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' Parameter CVE-2026-121792 6.5 MediumNovember 7, 2026
• rubengc automatorwp – no-code workflow automation, integration & webhooks plugin, now with ai AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action CVE-2026-104728 4.3 MediumOctober 10, 2026
• rubengc gamipress – gamification plugin to reward points, badges & ranks in wordpress, now with ai GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'video_id' Parameter CVE-2026-14379 6.4 MediumOctober 10, 2026
• rubengc gamipress – gamification plugin to reward points, badges & ranks in wordpress, now with ai GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection CVE-2026-15439 6.5 MediumSeptember 11, 2026
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action CVE-2026-76074 4.3 MediumAugust 22, 2026
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action CVE-2026-76057 4.3 MediumAugust 22, 2026
• rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode CVE-2026-16091 6.4 MediumAugust 1, 2026
• rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode CVE-2026-16090 6.4 MediumAugust 1, 2026
• rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute CVE-2026-15730 6.4 MediumJuly 28, 2026
• rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter CVE-2026-13450 5.3 MediumJuly 9, 2026
• rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure CVE-2025-13812 4.3 MediumJanuary 6, 2026
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation… CVE-2025-9539 8.0 HighSeptember 9, 2025
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions CVE-2025-9542 5.4 MediumSeptember 9, 2025
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions CVE-2025-5487 7.2 HighJune 14, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter CVE-2024-13496 7.5 HighJanuary 22, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function CVE-2024-13499 7.3 HighJanuary 22, 2025
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function CVE-2024-13495 7.3 HighJanuary 22, 2025
• rubengc automatorwp – automator plugin for no-code automations, webhooks & custom integrations in wordpress AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value CVE-2024-12626 9.6 CriticalDecember 19, 2024
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings CVE-2024-11036 7.3 HighNovember 19, 2024
• rubengc gamipress – link, gamipress - link +1 more GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5536 6.4 MediumJune 5, 2024
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2783 6.4 MediumApril 9, 2024
• gamipress, rubengc gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress +1 more GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2024-1799 8.8 HighMarch 20, 2024
• gamipress, rubengc gamipress – button +1 more GamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2460 6.4 MediumMarch 20, 2024
• gamipress, gamipress – the #1 gamification plugin to reward points, achievements, badges & ranks in wordpress, rubengc gamipress – the #1 gamification plugin to reward points, achievements, badges & ranks in wordpress +2 more WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control CVE-2023-25715 5.4 MediumDecember 19, 2023