Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GamiPress 8.0.6 Clear all filters
TI-2026-73845 CVE-2026-107320 · GHSA-v48m-jwvg-42cg

Missing authorization in GamiPress exposes private activity logs

Priority LOW 30

The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0033 Published 2026-10-14 Fixed in 8.0.6 CWE-200
TI-2026-73844 CVE-2026-107319 · GHSA-9h67-53f6-wh68

Missing authorization in GamiPress exposes activity log entries

Priority LOW 20

The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a Subscriber, to read arbitrary…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00259 Published 2026-10-14 Fixed in 8.0.6 CWE-639