GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

Güvenlik açıkları

• CVE-2024-11036kimlik doğrulamasız≤ 7.1.5

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via

  Kritik 9.8

• CVE-2023-24000kimlik doğrulamasız≤ 2.5.7

  WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2026-59538kimlik doğrulamasız≤ 7.9.7

  WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2024-1799katılımcı+≤ 6.8.6

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Sho

  Yüksek 8.8

• CVE-2026-94177kimlik doğrulamasız≤ 8.0.2

  WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-48874abone+≤ 7.8.7

  WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2025-49326yüksek yetki≤ 7.4.5

  WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

  Yüksek 7.6

• CVE-2024-13496kimlik doğrulamasız≤ 7.3.1

  GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

  Yüksek 7.5

• CVE-2025-47508giriş gerekir≤ 7.3.7

  WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

  Yüksek 7.5

• CVE-2024-13499kimlik doğrulamasız≤ 7.2.1

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

  Yüksek 7.3

• CVE-2024-13495kimlik doğrulamasız≤ 7.2.1

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

  Yüksek 7.3

• CVE-2026-15439abone+≤ 7.9.7

  GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection

  Orta 6.5

• CVE-2023-25715giriş gerekir≤ 2.5.6

  WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

  Orta 6.5

• CVE-2026-16091katılımcı+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

  Orta 6.4

• CVE-2026-16090katılımcı+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

  Orta 6.4

• CVE-2026-15730katılımcı+≤ 7.9.9.1

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

  Orta 6.4

• CVE-2023-25697kimlik doğrulamasız · tıklama gerekir≤ 2.5.6

  WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

  Orta 6.3

• CVE-2026-32420kimlik doğrulamasız · tıklama gerekir≤ 7.6.6

  WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 5.4

• CVE-2024-2783katılımcı+≤ 6.9.0

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scr

  Orta 5.4

• CVE-2026-13450kimlik doğrulamasız≤ 7.9.4

  GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter

  Orta 5.3

• CVE-2026-24546kimlik doğrulamasız≤ 7.6.3

  WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-30455kimlik doğrulamasız · tıklama gerekir≤ 6.8.5

  WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3