İçeriğe atla
Noroxi

GamiPress kayıtları

gamipress üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%46,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2023-24000
    40Planlayın

    WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    gamipress · gamipress31 Eki 2023

  • CVE-2024-11036
    39İzleyin

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via

    KritikCVSS 9,8İstismar yokEPSS %0

    gamipress · gamipress19 Kas 2024

  • CVE-2024-1799
    35İzleyin

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Sho

    YüksekCVSS 8,8İstismar yokEPSS %0

    gamipress · gamipress19 Mar 2024

  • CVE-2024-2505
    32İzleyin

    GamiPress < 6.8.9 - Broken Access Control

    YüksekCVSS 8,1İstismar yokEPSS %0

    gamipress · gamipress29 Nis 2024

  • CVE-2024-13496
    31İzleyin

    GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gamipress · gamipress22 Oca 2025

  • CVE-2024-13499
    29İzleyin

    GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

    YüksekCVSS 7,3İstismar yokEPSS %0

    gamipress · gamipress22 Oca 2025

  • CVE-2024-13495
    29İzleyin

    GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

    YüksekCVSS 7,3İstismar yokEPSS %0

    gamipress · gamipress22 Oca 2025

  • CVE-2023-25715
    26İzleyin

    WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

    OrtaCVSS 6,5İstismar yokEPSS %0

    gamipress · gamipress19 Ara 2023

  • CVE-2023-25697
    25İzleyin

    WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

    OrtaCVSS 6,3İstismar yokEPSS %0

    gamipress · gamipress19 Haz 2024

  • CVE-2023-0154
    21İzleyin

    GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    gamipress · gamipress6 Şub 2023

  • CVE-2024-2460
    21İzleyin

    GamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    gamipress · gamipress19 Mar 2024

  • CVE-2024-2783
    21İzleyin

    GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scr

    OrtaCVSS 5,4İstismar yokEPSS %0

    gamipress · gamipress9 Nis 2024

  • CVE-2024-5536
    21İzleyin

    GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    gamipress · gamipress - link5 Haz 2024

  • CVE-2024-30455
    17İzleyin

    WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    gamipress · gamipress29 Mar 2024

  • CVE-2024-8245
    17İzleyin

    GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

    OrtaCVSS 4,3İstismar yokEPSS %0

    gamipress · gamipress - reset user15 May 2025