CVE-2026-107319

The GamiPress WordPress plugin before version 8.0.6 is vulnerable to an activity log disclosure due to a missing capability check and ownership verification on an authenticated AJAX action . This flaw allows any authenticated user, such as a Subscriber , to read arbitrary entries from the activit...

WordPress GamiPress plugin < 8.0.6 - Subscriber+ Activity Log Disclosure vulnerability

Subscriber+ Activity Log Disclosure vulnerability discovered by Shirshak in WordPress Plugin GamiPress versions 8.0.6...