CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

316 matches found

Rapid7 Vulnerability Database (full)•added 2026/01/06 12:00 a.m.•4 views

CVE-2025-13812: Missing Authorization

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS5.8AI score0.002EPSS

SaveExploits0References1

CNNVD•added 2026/01/06 12:00 a.m.•23 views

WordPress plugin GamiPress – A gamification plugin for rewarding points, achievements, badges, and ranks in WordPress. Security vulnerabilities.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.3AI score0.002EPSS

SaveExploits0References2

Positive Technologies•added 2026/01/06 12:00 a.m.•40 views

PT-2026-1420

Name of the Vulnerable Software and Affected Versions GamiPress – Gamification plugin for WordPress versions prior to 7.6.2 Description The GamiPress – Gamification plugin for WordPress is susceptible to unauthorized data access. A missing capability check in the gamipress ajax get posts and...

4.3CVSS6AI score0.002EPSS

SaveExploits0References7

Patchstack•added 2026/01/05 10:33 p.m.•25 views

WordPress GamiPress plugin <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Information Exposure vulnerability discovered by kr0d in WordPress Plugin GamiPress versions = 7.6.1...

4.3CVSS6.7AI score0.002EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/12/31 12:00 a.m.•23 views

WordPress GamiPress plugin <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function vulnerability

Unauthenticated Arbitrary Shortcode Execution via gamipressdoshortcode Function vulnerability discovered by abrahack in WordPress Plugin GamiPress versions = 7.2.1...

7.3CVSS5.3AI score0.00591EPSS

SaveExploits0References1Affected Software1