WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gamipress
Published
2025-05-07
Title
GamiPress < 7.3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
gamipress
Published
2025-06-05
Title
GamiPress < 7.4.6 - Authenticated (Administrator+) SQL Injection
Slug
gamipress
Published
2026-01-05
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.6.2 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
gamipress
Published
2026-02-26
Title
GamiPress < 7.6.7 - Cross-Site Request Forgery
Slug
gamipress
Published
2026-05-25
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.6.4 - Missing Authorization
Slug
gamipress
Published
2026-06-02
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.8.8 - Authenticated (Subscriber+) SQL Injection
Slug
gamipress
Published
2026-07-08
Title
GamiPress < 7.9.5 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter
Slug
gamipress
Published
2026-07-23
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.9.8 - Unauthenticated SQL Injection
Slug
gamipress
Published
2026-07-31
Title
GamiPress < 7.9.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode
Slug
gamipress
Published
2026-07-27
Title
GamiPress < 7.9.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute
Slug
gamipress
Published
2026-07-31
Title
GamiPress < 7.9.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode
Slug
gamipress
Published
2026-08-31
Title
GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners
Slug
gamipress-button
Published
2024-03-19
Title
GamiPress – Button < 1.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gamipress-link
Published
2024-06-04
Title
GamiPress – Link < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gamipress-reset-user
Published
2024-07-20
Title
GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
Slug
gamipress-vimeo-integration
Published
2023-01-11
Title
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
Slug
ganohrs-toggle-shortcode
Published
2024-12-13
Title
Ganohrs Toggle Shortcode < 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gantry
Published
2024-10-17
Title
Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
Slug
gap-hub-user-role
Published
2024-12-18
Title
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
Slug
garagesale
Published
2014-04-25
Title
Garagesale < 1.2.3 - XSS
Slug
garden-gnome-package
Published
2023-11-06
Title
Garden Gnome Package < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
garden-gnome-package
Published
2024-09-23
Title
Garden Gnome Package < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
garden-gnome-package
Published
2025-01-07
Title
Garden Gnome Package < 2.4.0 - Authenticated (Author+) Arbitrary File Upload
Slug
garden-gnome-package
Published
2026-02-21
Title
Garden Gnome Package < 2.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
gatormail-smart-forms
Published
2025-01-10
Title
GatorMail SmartForms < 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting