Gamerz vulnerabilities
We track 3 vulnerabilities in Gamerz products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2026.
Latest Gamerz vulnerabilities
- 7.2 High severity
WP-Stats: Improper Neutralization of Input During Web Page Generation
The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web s
- 7.2 High severity
WP-DownloadManager: Unrestricted Upload of File with Dangerous Type
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and including, 1.68.11. This makes it possible for authenticated attackers, with Adminis
- 7.2 High severity
WP-DownloadManager: Absolute Path Traversal
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file deletion due to lack of restriction on the directory a file can be deleted from in all versions up to, and including, 1.68.10. This makes it possible for authenticated attackers, with