Lucene search
+L

73 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:16 a.m.9 views

CVE-2025-13812

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS5AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.15 views

CVE-2024-2783

The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...

6.4CVSS5.7AI score0.00363EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/06 8:15 a.m.9 views

CVE-2025-13812

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/06 7:22 a.m.33 views

CVE-2025-13812 GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/06 12:00 a.m.10 views

WordPress plugin GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.3AI score0.00175EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-51631

Malicious code in bioql PyPI...

7.3CVSS8.9AI score0.00559EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-51633

Malicious code in bioql PyPI...

7.3CVSS8.9AI score0.00591EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2024-27727

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.00363EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-15260

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00179EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-17524

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00956EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-33734

Malicious code in bioql PyPI...

9.8CVSS8.7AI score0.00712EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-29625

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00506EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/06/05 12:19 a.m.12 views

WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Nguyen Kim Sang in WordPress Plugin GamiPress versions = 7.4.5...

7.6CVSS7.8AI score0.00288EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/17 9:01 p.m.17 views

CVE-2024-8245

The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS6.8AI score0.00179EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/15 8:15 p.m.22 views

CVE-2024-8245

The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS0.00179EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/15 8:15 p.m.9 views

CVE-2024-8245

The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score0.00179EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:07 p.m.10 views

CVE-2024-8245 GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

7AI score0.00179EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/15 8:07 p.m.33 views

CVE-2024-8245

The CVE concerns the GamiPress WordPress plugin prior to version 1.0.1, where a missing CSRF check when updating settings allows a logged‑in attacker to change settings via a CSRF attack. Affected product: GamiPress WordPress plugin (pre‑1.0.1). Root cause: no CSRF protection on settings updates....

4.3CVSS6.8AI score0.00179EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/05/07 12:35 p.m.15 views

WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by muhammad yudha in WordPress Plugin GamiPress versions = 7.3.7...

7.5CVSS8.2AI score0.00716EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 5:21 a.m.14 views

CVE-2024-1799

The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievementtypes' attribute of the gamipressearnings shortcode in all versions up to, and including, 6.8.6 due to insufficient escapin...

8.8CVSS7.1AI score0.00956EPSS
SaveExploits0References1
Rows per page
Query Builder