CVE-2024-8245 | Medium | 4.3 | 2025-05-15 | The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admi… |
CVE-2024-13499 | High | 7.3 | 2025-01-22 | The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode e… |
CVE-2024-13496 | High | 7.5 | 2025-01-22 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection… |
CVE-2024-13495 | High | 7.3 | 2025-01-22 | The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode e… |
CVE-2024-11036 | High | 7.3 | 2024-11-19 | The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shor… |
CVE-2023-25697 | Medium | 5.4 | 2024-06-19 | Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 2.5.6. |
CVE-2024-5536 | Medium | 6.4 | 2024-06-05 | The GamiPress – Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gamipress_link shortcode in all versions up to, and inc… |
CVE-2024-2505 | High | 8.1 | 2024-04-29 | The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate req… |
CVE-2024-2783 | Medium | 6.4 | 2024-04-09 | The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site… |
CVE-2024-30455 | Medium | 4.3 | 2024-03-29 | Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 6.8.5. |
CVE-2024-2460 | Medium | 6.4 | 2024-03-20 | The GamiPress – Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gamipress_button' shortcode in all versions up to, a… |
CVE-2024-1799 | High | 8.8 | 2024-03-20 | The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via… |
CVE-2023-25715 | Medium | 5.4 | 2023-12-19 | Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue… |
CVE-2023-24000 | High | 8.2 | 2023-10-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GamiPress gamipress allows SQL Injection.This issue affec… |
CVE-2023-0154 | Medium | 5.4 | 2023-02-06 | The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |