CVE-2026-59538 WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...

EUVD-2026-49214

Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...

PT-2026-64933

Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...

PT-2026-49482

Subscriber SQL Injection in GamiPress = 7.8.7 versions...

VulnCheck KEV: CVE-2023-24000

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through 2.5.7...

CVE-2026-32420

CVE-2026-32420 is a CSRF vulnerability in WordPress GamiPress plugin by Ruben Garcia, affecting versions up to 7.6.6 . The documents confirm a CSRF flaw but do not provide details on root cause, exploitability, impact specifics, or remediation. No exploit information is included.

CVE-2024-5536

The GamiPress – Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gamipresslink shortcode in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-2783

The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...