Vulnerabilities

TI-2026-79590 CVE-2026-112837 · GHSA-xv76-fmjx-r3cw

SQL injection in WordPress GamiPress plugin allows blind attacks

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00305 Published 2026-10-23 No fix listed CWE-89

TI-2026-63362 CVE-2026-94177 · GHSA-hm28-2mq5-c33m

WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability

LOW 36

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00253 Published 2026-09-30 No fix listed CWE-89

TI-2026-54438 CVE-2026-78266 · GHSA-ffx7-p465-qvwr

WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-08-24 No fix listed CWE-862

TI-2026-42501 CVE-2026-59538 · GHSA-53v9-x358-9cg2

WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-07-27 No fix listed CWE-89

TI-2026-36138 CVE-2026-48874 · GHSA-xfmm-2ph2-w9fw

WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in GamiPress <= 7.8.7 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00332 Published 2026-06-15 No fix listed CWE-89

TI-2026-30998 CVE-2026-42775 · GHSA-96g7-fvc7-jq58

WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-06-15 No fix listed CWE-79

TI-2026-30909 CVE-2026-42650 · GHSA-rr8f-pgwf-255h

WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

LOW 37

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00195 Published 2026-06-15 No fix listed CWE-79

TI-2026-29453 CVE-2026-40785 · GHSA-47m7-6x3q-v8mc

WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability

LOW 31

Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00385 Published 2026-06-15 No fix listed CWE-288

TI-2026-19786 CVE-2026-24546 · GHSA-5v8g-2w9g-6cwm

WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00295 Published 2026-05-25 No fix listed CWE-862

TI-2026-24948 CVE-2026-32420 · GHSA-j3w6-h89g-gv3p

WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00124 Published 2026-03-13 No fix listed CWE-352

TI-2025-42082 CVE-2025-68561 · GHSA-c856-xr9c-mcx8

WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.2.4.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00269 Published 2025-12-23 No fix listed CWE-89

TI-2025-31375 CVE-2025-49327 · GHSA-7hwc-894r-x5hw

WordPress ShortLinks Pro plugin <= 1.0.7 - SQL Injection Vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia ShortLinks Pro shortlinkspro allows SQL Injection.This issue affects ShortLinks Pro: from n/a through <=…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00352 Published 2025-06-06 No fix listed CWE-89

TI-2025-31374 CVE-2025-49326 · GHSA-w7qj-8x38-58m7

WordPress GamiPress plugin <= 7.4.5 - SQL Injection Vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through <= 7.4.5.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00352 Published 2025-06-06 No fix listed CWE-89

TI-2025-30606 CVE-2025-48280 · GHSA-wfrh-ccv8-ffqp

WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00353 Published 2025-05-19 No fix listed CWE-89

TI-2025-30005 CVE-2025-47508 · GHSA-cx66-mw68-mp8j

WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability

LOW 34

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ruben Garcia GamiPress gamipress allows PHP Local File Inclusion.This issue affects GamiPress: from…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00778 Published 2025-05-07 No fix listed CWE-98

Vulnerabilities

Filters