WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Admin+ SQL Injection
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
game-tabs
Published
2014-04-25
Title
Game Tabs <= 0.4.0 - XSS
Slug
game-users-share-buttons
Published
2025-06-27
Title
Game Users Share Buttons <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Deletion via themeNameId Parameter
Slug
gamepress
Published
2021-09-20
Title
GamePress <= 1.1.0 - Reflected Cross-Site Scripting
Slug
gamipress
Published
2023-02-14
Title
GamiPress < 2.5.7.1 - Unauthenticated SQLi
Slug
gamipress
Published
2024-03-19
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 6.8.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
gamipress
Published
2024-03-27
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gamipress
Published
2024-03-28
Title
GamiPress < 6.8.6 - Cross-Site Request Forgery
Slug
gamipress
Published
2024-04-08
Title
GamiPress < 6.8.9 - Broken Access Control
Slug
gamipress
Published
2024-11-18
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.1.6 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.2.2 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.2.2 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
Slug
gamipress
Published
2025-01-21
Title
GamiPress < 7.3.2 - Unauthenticated SQL Injection via orderby Parameter
Slug
gamipress
Published
2025-05-07
Title
GamiPress < 7.3.8 - Authenticated (Contributor+) Local File Inclusion
Slug
gamipress
Published
2025-06-05
Title
GamiPress < 7.4.6 - Authenticated (Administrator+) SQL Injection
Slug
gamipress
Published
2026-01-05
Title
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress < 7.6.2 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Slug
gamipress-button
Published
2024-03-19
Title
GamiPress – Button < 1.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
gamipress-link
Published
2024-06-04
Title
GamiPress – Link < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gamipress-reset-user
Published
2024-07-20
Title
GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF
Slug
gamipress-vimeo-integration
Published
2023-01-11
Title
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
Slug
ganohrs-toggle-shortcode
Published
2024-12-13
Title
Ganohrs Toggle Shortcode < 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gantry
Published
2024-10-17
Title
Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
Slug
gap-hub-user-role
Published
2024-12-18
Title
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
Slug
garagesale
Published
2014-04-25
Title
Garagesale < 1.2.3 - XSS