Lucene search
K

60 matches found

RedhatCVE
RedhatCVE
added 2026/05/26 8:14 p.m.6 views

CVE-2026-24546

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.0 views

CVE-2026-32420

Cross-Site Request Forgery CSRF vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through = 7.6.6...

5.4CVSS5.8AI score0.0002EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.1 views

EUVD-2026-11945

Cross-Site Request Forgery CSRF vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through = 7.6.6...

5.4CVSS5.8AI score0.0002EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:42 a.m.1 views

CVE-2026-32420

Cross-Site Request Forgery CSRF vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through = 7.6.6...

5.8AI score0.0002EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.1 views

CVE-2026-32420 WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through = 7.6.6...

5.8AI score0.0002EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/26 5:27 p.m.3 views

WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by letchupkt in WordPress Plugin GamiPress versions = 7.6.6...

5.4CVSS5.8AI score0.0002EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.4 views

CVE-2024-2505

The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...

8.1CVSS6.6AI score0.00634EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:16 a.m.1 views

CVE-2025-13812

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS5AI score0.00038EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.7 views

CVE-2024-2783

The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escapin...

6.4CVSS5.7AI score0.00196EPSS
Exploits0References1
NVD
NVD
added 2026/01/06 8:15 a.m.3 views

CVE-2025-13812

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS0.00038EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/06 7:22 a.m.20 views

CVE-2025-13812 GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...

4.3CVSS0.00038EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.1 views

WordPress plugin GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

4.3CVSS6.3AI score0.00038EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51631

Malicious code in bioql PyPI...

7.3CVSS8.9AI score0.00807EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-27727

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.00196EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-29625

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.0005EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-17524

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00244EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-33734

Malicious code in bioql PyPI...

9.8CVSS8.7AI score0.02477EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51633

Malicious code in bioql PyPI...

7.3CVSS8.9AI score0.00768EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-15260

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00091EPSS
Exploits1References3
Patchstack
Patchstack
added 2025/06/05 12:19 a.m.9 views

WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Nguyen Kim Sang in WordPress Plugin GamiPress versions = 7.4.5...

7.6CVSS7.8AI score0.00213EPSS
Exploits0Affected Software1
Rows per page
Query Builder