Gamipress CVE-2024-30455

MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2024-03-29 audit@patchstack.com

4.3

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Mar 29, 2024 - 17:15 cve.org

MEDIUM 4.3

DescriptionCVE.org

Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 6.8.5.

AnalysisAI

Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.8.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.8.5. Affected products include: Gamipress. Version information: through 6.8.5..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

More in Gamipress

View all

CVE-2024-13496 HIGH Act Now POC

The GamiPress - Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

CVE-2024-2505 HIGH This Week POC

The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings

CVE-2024-11036 CRITICAL Act Now

The The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for Wo

CVE-2023-0154 MEDIUM This Month POC

The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputt

CVE-2024-1799 HIGH This Week

The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr

CVE-2026-48874 HIGH This Week

SQL injection in the GamiPress WordPress plugin versions 7.8.7 and earlier allows authenticated users with subscriber-le

CVE-2024-2783 MEDIUM This Month

The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr

CVE-2024-2460 MEDIUM This Month

The GamiPress - Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gamipress_but

CVE-2023-25715 MEDIUM This Month

Missing Authorization vulnerability in GamiPress GamiPress - The #1 gamification plugin to reward points, achievements,

CVE-2026-32420 MEDIUM This Month

GamiPress versions 7.6.6 and earlier contain a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthenticat

CVE-2026-24546 MEDIUM This Month

Unauthenticated information disclosure in the GamiPress WordPress plugin (versions through 7.6.3) allows remote attacker

CVE-2024-13499 HIGH This Month

The The GamiPress - Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress

Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)

View all

CVE-2016-6277 HIGH POC

CVE-2014-100005 HIGH POC

CVE-2013-5696 MEDIUM POC

CVE-2020-36836 HIGH POC

CVE-2015-2295 MEDIUM POC

CVE-2016-6897 MEDIUM POC

CVE-2022-41622 HIGH POC

CVE-2025-2907 CRITICAL POC

Same technique CSRF

View all

CVE-2016-6277 HIGH POC

CVE-2014-100005 HIGH POC

CVE-2017-9757 HIGH POC

CVE-2013-5696 MEDIUM POC

CVE-2013-4152 MEDIUM POC

CVE-2024-7094 CRITICAL

CVE-2015-4624 HIGH POC

CVE-2020-36836 HIGH POC

Share

CVE-2024-30455 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy