Is GamiPress safe?

Every recorded flaw

• Oct 23, 2026GamiPress: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2026-112837 · affects up to 8.0.7 · reported by PatchstackHigh 8.5
• Oct 14, 2026GamiPress: Does not properly authorize access to private activity log entriesCVE-2026-107320 · fixed in 8.0.6 · reported by WPScanMedium 5.3
• Oct 14, 2026GamiPress: Does not perform a capability check or ownership verification on one of its authenticated AJAX actionsCVE-2026-107319 · fixed in 8.0.6 · reported by WPScanMedium 4.3
• Oct 10, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Stored Cross-Site ScriptingCVE-2026-14379 · affects up to 7.9.4 · reported by WordfenceMedium 6.4
• Sep 30, 2026GamiPress: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2026-94177 · affects up to 8.0.2 · reported by PatchstackHigh 8.5
• Sep 11, 2026GamiPress: Authenticated (Subscriber+) SQL InjectionCVE-2026-15439 · affects up to 7.9.7 · reported by WordfenceMedium 6.5
• Sep 2, 2026GamiPress: Does not properly restrict its video watch-tracking functionalityCVE-2026-77764 · fixed in 7.9.9.6 · reported by WPScanMedium 4.3
• Aug 1, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Stored Cross-Site ScriptingCVE-2026-16091 · affects up to 7.9.9.1 · reported by WordfenceMedium 6.4
• Aug 1, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Stored Cross-Site ScriptingCVE-2026-16090 · affects up to 7.9.9.1 · reported by WordfenceMedium 6.4
• Jul 28, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Stored Cross-Site ScriptingCVE-2026-15730 · affects up to 7.9.9.1 · reported by WordfenceMedium 6.4
• Jul 27, 2026Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.CVE-2026-59538 · affects up to 7.9.7 · reported by PatchstackCritical 9.3
• Jul 9, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Insecure Direct Object ReferenceCVE-2026-13450 · affects up to 7.9.4 · reported by WordfenceMedium 5.3
• Jun 15, 2026Subscriber SQL Injection in GamiPress <= 7.8.7 versions.CVE-2026-48874 · affects up to 7.8.7 · reported by PatchstackHigh 8.5
• May 25, 2026GamiPress: Missing AuthorizationCVE-2026-24546 · affects up to 7.6.3 · reported by PatchstackMedium 5.3
• Mar 13, 2026GamiPress: Cross-Site Request Forgery (CSRF)CVE-2026-32420 · affects up to 7.6.6 · reported by PatchstackMedium 5.4
• Jan 6, 2026GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Unauthorized access of dataCVE-2025-13812 · affects up to 7.6.1 · reported by WordfenceMedium 4.3
• Jun 6, 2025GamiPress: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2025-49326 · affects up to 7.4.5 · reported by PatchstackHigh 7.6
• May 15, 2025GamiPress: Does not have CSRF check in placeCVE-2024-8245 · fixed in 1.0.1 · reported by WPScanMedium 4.3
• May 7, 2025GamiPress: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-47508 · affects up to 7.3.7 · reported by PatchstackHigh 7.5
• Jan 22, 2025The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Arbitrary shortcode executionCVE-2024-13499 · affects up to 7.2.1 · reported by WordfenceHigh 7.3
• Jan 22, 2025GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Time-based SQL InjectionCVE-2024-13496 · affects up to 7.3.1 · fixed in 7.2.2 · reported by Wordfence2.2% oddsHigh 7.5
• Jan 22, 2025The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in: Arbitrary shortcode executionCVE-2024-13495 · affects up to 7.2.1 · reported by WordfenceHigh 7.3
• Nov 19, 2024The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in: Arbitrary shortcode executionCVE-2024-11036 · affects up to 7.1.5 · reported by WordfenceHigh 7.3
• Jun 19, 2024GamiPress: Cross-Site Request Forgery (CSRF)CVE-2023-25697 · affects up to 2.5.6 · reported by PatchstackMedium 5.4
• Apr 9, 2024GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in: Stored Cross-Site ScriptingCVE-2024-2783 · affects up to 6.9.0 · reported by WordfenceMedium 6.4
• Mar 29, 2024GamiPress: Cross-Site Request Forgery (CSRF)CVE-2024-30455 · affects up to 6.8.5 · reported by PatchstackMedium 4.3
• Mar 19, 2024GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in: SQL InjectionCVE-2024-1799 · affects up to 6.8.6 · reported by WordfenceHigh 8.8
• Dec 19, 2023GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in: Missing AuthorizationCVE-2023-25715 · affects up to 2.5.6 · reported by PatchstackMedium 5.4
• Oct 31, 2023GamiPress: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-24000 · affects up to 2.5.7 · reported by Patchstack2.5% oddsHigh 8.2
• Feb 6, 2023GamiPress: Does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedCVE-2023-0154 · fixed in 1.0.9 · reported by WPScanMedium 5.4

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.