Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how gamipress compares to other vendors in security performance

View Risk Score →

GamiPress GamiPress - Gamification pluginGamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2026-16091

GamiPress GamiPress – Gamification pluginGamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2026-16090

GamiPress GamiPress – WordPress Gamification pluginGamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2026-15730

GamiPress GamiPressGamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

Risk 22
Severity
4.3
First published (updated )
CVE-2024-8245

GamiPress GamiPressGamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

Risk 43
Severity
7.5
First published (updated )
CVE-2024-13496
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GamiPress GamiPress WordPressGamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

Risk 51
Severity
7.3
First published (updated )
CVE-2024-13495

GamiPress GamiPress WordPressGamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

Risk 51
Severity
7.3
First published (updated )
CVE-2024-13499

GamiPress GamiPress WordPressGamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings

Risk 86
Severity
9.8
First published (updated )
CVE-2024-11036

GamiPress GamiPress WordPressWordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability

Risk 45
Severity
6.3
First published (updated )
CVE-2023-25697

GamiPress Gamipress - Link WordpressGamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-5536
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GamiPress GamiPressGamiPress < 6.8.9 - Broken Access Control

Risk 60
Severity
8.1
First published (updated )
CVE-2024-2505

GamiPress GamiPress WordPressGamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2783

GamiPress GamiPress WordPressWordPress GamiPress plugin <= 6.8.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
First published (updated )
CVE-2024-30455

GamiPress GamiPress WordPressGamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode

Risk 79
Severity
8.8
First published (updated )
CVE-2024-1799

GamiPress GamiPress WordPressGamiPress – Button <= 1.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2460
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GamiPress GamiPress WordPressWordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

Risk 38
Severity
6.5
First published (updated )
CVE-2023-25715

GamiPress GamiPress WordPressWordPress GamiPress plugin <= 2.5.7 - Unauthenticated SQL Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2023-24000

GamiPress GamiPress WordPressGamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS

Risk 34
Severity
5.4
First published (updated )
CVE-2023-0154

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203