237 matches found
WordPress GamiPress plugin < 6.8.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cyc707 in WordPress Plugin GamiPress versions 6.8.9...
CVE-2024-2505
The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...
CVE-2024-2505
The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...
CVE-2024-2505 GamiPress < 6.8.9 - Broken Access Control
The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...
CVE-2024-2505 GamiPress < 6.8.9 - Broken Access Control
The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...
CVE-2024-2505
CVE-2024-2505 affects the GamiPress WordPress plugin prior to version 6.8.9. The vulnerability is a broken access control flaw that allows Authors to manipulate requests and extend access to lower-privilege users (e.g., Subscribers) despite configuration limits. The connected documents confirm th...
WordPress Plugin GamiPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress GamiPress Plugin < 6.8.9 is vulnerable to Broken Access Control
Software GamiPress Type Plugin Vulnerable versions 6.8.9 Fixed in 6.8.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2505 Patch priority Low CVSS severity Low 3.8 Developer Claim ownership PSID f5678a31222a Credits cyc707 Required privilege Author...
CVE-2024-2783
The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...
CVE-2024-2783 GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...
CVE-2024-2783
The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...
CVE-2024-2783
CVE-2024-2783: GamiPress WordPress plugin is susceptible to Stored XSS via shortcode attributes in all versions up to 6.9.0 due to insufficient input sanitization/output escaping. Authenticated users with contributor+ access can inject scripts that run on page visits. Red Hat and WordPress source...
PT-2024-22067 · WordPress · Gamipress
Name of the Vulnerable Software and Affected Versions: GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress versions up to, and including, 6.9.0 Description: The issue is related to Stored Cross-Site Scripting due to insufficient...
WordPress Plugin GamiPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...
GamiPress < 6.8.9 - Broken Access Control
Description The plugin's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability resembles broken acces...
GamiPress < 6.8.9 - Broken Access Control
Description The plugin's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability resembles broken acces...
GamiPress < 6.8.6 - Cross-Site Request Forgery
Description The GamiPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.8.5. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request...
CVE-2024-30455
Cross-Site Request Forgery CSRF vulnerability in GamiPress.This issue affects GamiPress: from n/a through 6.8.5...
CVE-2024-30455
Cross-Site Request Forgery CSRF vulnerability in GamiPress.This issue affects GamiPress: from n/a through 6.8.5...
CVE-2024-30455 WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in GamiPress.This issue affects GamiPress: from n/a through 6.8.5...