Skip to content
Noroxi

GamiPress

gamipress · plugin

Known security vulnerabilities for GamiPress. Find out in seconds which version runs on your site with WP Lens.

22 known vulnerabilities

3 critical · 2 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2024-11036

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via

    Critical 9.8

  • CVE-2023-24000

    WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

    Critical 9.8

  • CVE-2026-59538

    WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2024-1799

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Sho

    High 8.8

  • CVE-2026-94177

    WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability

    High 8.5

  • CVE-2026-48874

    WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability

    High 8.5

  • CVE-2025-49326

    WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

    High 7.6

  • CVE-2025-47508

    WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2024-13496

    GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

    High 7.5

  • CVE-2024-13499

    GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

    High 7.3

  • CVE-2024-13495

    GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

    High 7.3

  • CVE-2026-15439

    GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection

    Medium 6.5

  • CVE-2023-25715

    WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

    Medium 6.5

  • CVE-2026-16091

    GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

    Medium 6.4

  • CVE-2026-16090

    GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

    Medium 6.4

  • CVE-2026-15730

    GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

    Medium 6.4

  • CVE-2023-25697

    WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

    Medium 6.3

  • CVE-2026-32420

    WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 5.4

  • CVE-2024-2783

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scr

    Medium 5.4

  • CVE-2026-13450

    GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter

    Medium 5.3

  • CVE-2026-24546

    WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2024-30455

    WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

← Back to directory