GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

Уязвимости

• CVE-2024-11036без авторизации≤ 7.1.5

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via

  Критич. 9.8

• CVE-2023-24000без авторизации≤ 2.5.7

  WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2026-59538без авторизации≤ 7.9.7

  WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2024-1799участник+≤ 6.8.6

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Sho

  Высокий 8.8

• CVE-2026-94177без авторизации≤ 8.0.2

  WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-48874подписчик+≤ 7.8.7

  WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-49326высокие права≤ 7.4.5

  WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

  Высокий 7.6

• CVE-2024-13496без авторизации≤ 7.3.1

  GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

  Высокий 7.5

• CVE-2025-47508нужен вход≤ 7.3.7

  WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

  Высокий 7.5

• CVE-2024-13499без авторизации≤ 7.2.1

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

  Высокий 7.3

• CVE-2024-13495без авторизации≤ 7.2.1

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

  Высокий 7.3

• CVE-2026-15439подписчик+≤ 7.9.7

  GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection

  Средний 6.5

• CVE-2023-25715нужен вход≤ 2.5.6

  WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

  Средний 6.5

• CVE-2026-16091участник+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

  Средний 6.4

• CVE-2026-16090участник+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

  Средний 6.4

• CVE-2026-15730участник+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

  Средний 6.4

• CVE-2023-25697без авторизации · нужен клик≤ 2.5.6

  WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

  Средний 6.3

• CVE-2026-32420без авторизации · нужен клик≤ 7.6.6

  WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 5.4

• CVE-2024-2783участник+≤ 6.9.0

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scr

  Средний 5.4

• CVE-2026-13450без авторизации≤ 7.9.4

  GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter

  Средний 5.3

• CVE-2026-24546без авторизации≤ 7.6.3

  WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-30455без авторизации · нужен клик≤ 6.8.5

  WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3