1 matches found
CVE-2024-1799: Improper Neutralization of Special Elements used in an SQL Command
The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievementtypes' attribute of the gamipressearnings shortcode in all versions up to, and including, 6.8.6 due to insufficient escapin...
8.8CVSS5.7AI score0.00956EPSS
SaveExploits0References3
20