Gamipress (Unknown) - vulnerabilities (CVEs)

6 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-14. Vendor: Unknown.

CVEs of Gamipress

• CVE-2026-107320 - CVSS 5.3 (medium), 2026-10-14: The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the…
• CVE-2026-107319 - CVSS 4.3 (medium), 2026-10-14: The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing…
• CVE-2026-77764 - CVSS 4.3 (medium), 2026-09-02: The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as…
• CVE-2024-8245 - CVSS 4.3 (medium), 2025-05-15: The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in…
• CVE-2024-2505 - CVSS 8.1 (high), 2024-04-29: The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate…
• CVE-2023-0154 - CVSS 5.4 (medium), 2023-02-06: The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the…