CVE-2026-112837: WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress GamiPress pluginto a version that resolves this vulnerability.Fixed in 8.0.8
Event History
Frequently Asked Questions
Which installations are affected?
GamiPress versions through 8.0.7 are affected. The available information does not identify a lower affected version, so deployments using any version at or below 8.0.7 should be treated as potentially vulnerable.
What level of access does an attacker need?
The vulnerability has a low-privileges requirement (PR:L), meaning an attacker needs an authenticated account with some level of access. No user interaction is required, and the attack can be performed over the network.
What is the likely impact of exploitation?
Successful exploitation enables blind SQL injection. The supplied severity vector indicates high confidentiality impact, no integrity impact, and low availability impact; the scope is changed.