WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gallery-widget
Published
2025-07-04
Title
Gallery Widget <= 1.2.1 - Authenticated (Contributor+) SQL Injection
Slug
gallery-with-thumbnail-slider
Published
2022-10-27
Title
Gallery with Thumbnail Slider < 6.1 - Contributor+ Stored XSS
Slug
gallery-with-thumbnail-slider
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
game-catalog
Published
2026-05-19
Title
Games Catalog <= 1.2.0 - Cross-Site Request Forgery to Arbitrary Game/Post Deletion
Slug
game-review-block
Published
2025-06-12
Title
Game Review Block < 4.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Contributor+ SQL Injection
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Admin+ SQL Injection
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
game-tabs
Published
2014-04-25
Title
Game Tabs <= 0.4.0 - XSS
Slug
game-users-share-buttons
Published
2025-06-27
Title
Game Users Share Buttons <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Deletion via themeNameId Parameter
Slug
gamepress
Published
2021-09-20
Title
GamePress <= 1.1.0 - Reflected Cross-Site Scripting
Slug
gamipress
Published
2023-02-14
Title
GamiPress < 2.5.7.1 - Unauthenticated SQLi
Slug
gamipress
Published
2024-03-19
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 6.8.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
gamipress
Published
2024-03-27
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gamipress
Published
2024-03-28
Title
GamiPress < 6.8.6 - Cross-Site Request Forgery
Slug
gamipress
Published
2024-04-08
Title
GamiPress < 6.8.9 - Broken Access Control
Slug
gamipress
Published
2024-11-18
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.1.6 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.2.2 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.2.2 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.3.2 - Unauthenticated SQL Injection via orderby Parameter
Slug
gamipress
Published
2025-05-07
Title
GamiPress < 7.3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
gamipress
Published
2025-06-05
Title
GamiPress < 7.4.6 - Authenticated (Administrator+) SQL Injection
Slug
gamipress
Published
2026-01-05
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.6.2 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
gamipress
Published
2026-02-26
Title
GamiPress < 7.6.7 - Cross-Site Request Forgery
Slug
gamipress
Published
2026-05-25
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.6.4 - Missing Authorization