Advisories · Technology
GamiPress.
Every CVE that names GamiPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure
- GamiPress
- Information disclosure
- CVSS 4.3 Medium
GamiPress < 8.0.6 - Subscriber+ Activity Log Disclosure
- GamiPress
- Broken access control
- CVSS 4.3 Medium
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners
- GamiPress
- Broken access control
- CVSS 4.3 Medium
GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
- GamiPress
- CVSS 5.4 Medium
WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability
- GamiPress
- Cross-site request forgery (CSRF)
- CVSS 8.1 High
GamiPress < 6.8.9 - Broken Access Control
- GamiPress
- CVSS 4.3 Medium
WordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability
- GamiPress
- Cross-site request forgery (CSRF)
- CVSS 8.2 High
WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection
- GamiPress
- SQL injection
- CVSS 5.4 Medium
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
- GamiPress