WordPress plugin GamiPress has a code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

PT-2025-2191 · WordPress · Gamipress

Name of the Vulnerable Software and Affected Versions: GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress versions up to, and including, 7.2.1 Description: The issue is related to arbitrary shortcode execution via the gamipress do shortcode function. This ...

PT-2025-1617 · WordPress · The Motors – Car Dealer

Name of the Vulnerable Software and Affected Versions: The Motors – Car Dealer, Classifieds & Listing plugin for WordPress versions 1.4.43 and earlier Description: The issue allows authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes due to the software...

PT-2024-17378 · WordPress · Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress versions up to, and including, 5.4.10 Description: The issue is related to arbitrary shortcode execution due to the software allowing users to execute an action...

PT-2024-17223

Name of the Vulnerable Software and Affected Versions Download Manager plugin for WordPress versions up to, and including, 3.3.03 Description The issue is due to the software allowing users to execute an action that does not properly validate a value before running do shortcode. This makes it...

PT-2024-16700

Name of the Vulnerable Software and Affected Versions Notibar – Notification Bar para WordPress versions up to 2.1.4 Description The issue allows authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes due to the software permitting users to execute an actio...

PT-2024-17589

Name of the Vulnerable Software and Affected Versions The Coupon Affiliates – Affiliate Plugin for WooCommerce versions prior to 5.16.7.2 Description The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software not properly validating a value before running do...

WordPress Plugin Grid Plus has a code injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

PT-2024-16720

Name of the Vulnerable Software and Affected Versions GamiPress versions up to, and including, 7.1.5 Description The issue allows arbitrary shortcode execution via the gamipress get user earnings AJAX action. This is due to the software allowing users to execute an action that does not properly...

WordPress Plugin The WP Photo Album Plus: Code Injection Vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Give is a fundraising platform plugin used in it.WordPress plugin is an application...

WordPress Plugin: FOX Code Injection Vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Give is a fundraising platform plugin used in it.WordPress plugin is an application...

PT-2024-39698

Name of the Vulnerable Software and Affected Versions Shortcodes AnyWhere plugin for WordPress versions up to, and including, 1.0.1 Description The issue allows arbitrary shortcode execution due to the software not properly validating a value before running do shortcode. This enables...

PT-2024-39047 · WordPress · Special Text Boxes

Name of the Vulnerable Software and Affected Versions: The Special Text Boxes plugin for WordPress versions up to and including 6.2.2 Description: The issue is related to arbitrary shortcode execution. This is due to the plugin adding the filter add filter'comment text','do shortcode';, which run...

PT-2024-29368

Name of the Vulnerable Software and Affected Versions WP Latest Posts plugin for WordPress versions up to, and including, 5.0.7 Description The issue is due to the plugin allowing users to execute an action that does not properly validate a user-supplied value prior to using that value in a call ...