Rubengc vulnerabilities
We track 9 vulnerabilities in Rubengc products across 3 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest Rubengc vulnerabilities
- 7.5 High severity
AutomatorWP – No-Code Workflow Automation…: Improper Privilege Management
The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.4. This is due to missing privilege-ceiling validation in the `create
- 8.0 High severity
AutomatorWP – Automator plugin for no-code…: Improper Control of Generation of Code
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the automatorwp_ajax_import_automation_from_url
- 7.2 High severity
AutomatorWP – Automator plugin for no-code…: Improper Neutralization of Special Elements used in an SQL Command
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the field_conditions parameter in all versions up to, and including, 5.2.3 due to insuffi
- 7.3 High severity
GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() function in all versions up to, and including, 7.2.1. This is d
- 7.5 High severity
GamiPress – Gamification plugin to reward…: Improper Neutralization of Special Elements used in an SQL Command
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.3.1 due to insufficient escaping
- 7.3 High severity
GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code
The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. This
- 9.6 Critical severity
AutomatorWP – Automator plugin for no-code…: Improper Neutralization of Input During Web Page Generation
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-search_field_value’ parameter in all versions up to, and including, 5.0.
- 9.8 Critical severity
GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code
The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_get_user_earnings AJAX action in all versions up to, and including, 7.1
- 8.8 High severity
GamiPress – Gamification plugin to reward…: Improper Neutralization of Special Elements used in an SQL Command
The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievement_types' attribute of the gamipress_earnings shortcode in all versions up to, and incl