SecAlerts
G

GamiPress

Security Risk Profile

40
/100
medium

Security Risk Score

Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 6, 2023 to present

20
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
40/100
medium
📈 1 in Last 30 Days

Severity Distribution

Critical
2
High
6
Medium
12
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
7
2
SQL Injection
4
3
CSRF
3
4
Code Injection
3

Most Affected Products

1. GamiPress GamiPress WordPress13
2. GamiPress GamiPress10
3. GamiPress WordPress plugin GamiPress1
4. GamiPress GamiPress - Gamification plugin1
5. GamiPress GamiPress – Gamification plugin1

Recent Vulnerabilities

See more →
CVE-2026-94177
CVSS 8.5high

WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability

Sep 30, 2026🔧 No Patch
CVE-2026-77764
CVSS 4.3medium

GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners

Sep 2, 2026🔧 No Patch
CVE-2026-16091
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

Aug 1, 2026🔧 No Patch
CVE-2026-16090
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

Aug 1, 2026🔧 No Patch
CVE-2026-15730
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

Jul 28, 2026🔧 No Patch
CVE-2024-8245
CVSS 4.3medium

GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

May 15, 2025🔧 No Patch
CVE-2024-13496
CVSS 7.5high

GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

Jan 22, 2025
CVE-2024-13495
CVSS 7.3high

GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

Jan 22, 2025
CVE-2024-13499
CVSS 7.3high

GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

Jan 22, 2025
CVE-2024-11036
CVSS 9.8critical

GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings

Nov 19, 2024🔧 No Patch

Monitor GamiPress in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.