GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress vulnerabilities

5 known vulnerabilities in GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress from Rubengc. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code

  CVE-2024-13499Jan 22, 2025Rubengc

  The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() function in all versions up to, and including, 7.2.1. This is d

• 7.5 High severity

  GamiPress – Gamification plugin to reward…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-13496Jan 22, 2025RubengcEPSS 2.18%

  The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.3.1 due to insufficient escaping

• 7.3 High severity

  GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code

  CVE-2024-13495Jan 22, 2025Rubengc

  The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. This

• 9.8 Critical severity

  GamiPress – Gamification plugin to reward…: Improper Control of Generation of Code

  CVE-2024-11036Nov 19, 2024Rubengc

  The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_get_user_earnings AJAX action in all versions up to, and including, 7.1

• 8.8 High severity

  GamiPress – Gamification plugin to reward…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-1799Mar 20, 2024Rubengc

  The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievement_types' attribute of the gamipress_earnings shortcode in all versions up to, and incl