Read the docs

rubengc

Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

rubengc records in CISA KEV

No rubengc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gamipress 13 records MEDIUM Gamipress - Link 1 record LOW Gamipress - Reset User 1 record MEDIUM

Records

1 record in Gamipress - Reset User · all components

TI-2024-07643 CVE-2024-8245 · GHSA-fpq7-6mfr-4vvq

GamiPress - Reset User <= 1.0.0 - GamiPress User Data Removal via CSRF

Priority MEDIUM 53

The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00187 Published 2025-05-15 Fixed in 1.0.1 CWE-352
Open these records in search →