SecAlerts
G

GamiPress

Security Risk Profile

34
/100
low

Security Risk Score

Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 6, 2023 to present

19
Total CVEs
7
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
34/100
low
📈 1 in Last 30 Days

Severity Distribution

Critical
2
High
5
Medium
12
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
7
2
CSRF
3
3
SQL Injection
3
4
Code Injection
3

Most Affected Products

1. GamiPress GamiPress WordPress13
2. GamiPress GamiPress9
3. GamiPress WordPress plugin GamiPress1
4. GamiPress GamiPress - Gamification plugin1
5. GamiPress GamiPress – Gamification plugin1

Recent Vulnerabilities

See more →
CVE-2026-77764
CVSS 4.3medium

GamiPress < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award via Watch-Video Listeners

Sep 2, 2026🔧 No Patch
CVE-2026-16091
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

Aug 1, 2026🔧 No Patch
CVE-2026-16090
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

Aug 1, 2026🔧 No Patch
CVE-2026-15730
CVSS 6.4medium

GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

Jul 28, 2026🔧 No Patch
CVE-2024-8245
CVSS 4.3medium

GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

May 15, 2025🔧 No Patch
CVE-2024-13496
CVSS 7.5high

GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

Jan 22, 2025
CVE-2024-13495
CVSS 7.3high

GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

Jan 22, 2025
CVE-2024-13499
CVSS 7.3high

GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

Jan 22, 2025
CVE-2024-11036
CVSS 9.8critical

GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings

Nov 19, 2024🔧 No Patch
CVE-2023-25697
CVSS 6.3medium

WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

Jun 19, 2024

Monitor GamiPress in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.