CVE-2024-13496 GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and la...

CVE-2024-13496

creationtimestamp| type| source ---|---|--- 2025-01-21 23:07:42+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lgbxsnqgxs2s 2025-01-22 11:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdaiqmrjn2j 2025-01-22 11:44:34+00:00| seen|...