Skip to main content

Gamipress CVE-2026-59538

| EUVDEUVD-2026-49214 CRITICAL
SQL Injection (CWE-89)
2026-07-27 Patchstack GHSA-53v9-x358-9cg2
WordPress SQLi Gamipress Wordpress Plugin Ruben Garcia
9.3
CVSS 3.1 · Vendor: Patchstack
Share

Severity by source

Vendor (Patchstack) PRIMARY
9.3 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Primary rating from Vendor (Patchstack) · only source for this CVE.

CVSS VectorVendor: Patchstack

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Jul 27, 2026 - 14:57 vuln.today
CVE Published
Jul 27, 2026 - 13:59 cve.org
CRITICAL 9.3

DescriptionCVE.org

Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

AnalysisAI

Unauthenticated SQL injection in the Gamipress WordPress plugin (versions up to 7.9.7) allows remote attackers to execute arbitrary SQL queries against the site's database. This can lead to unauthorized extraction of sensitive data (such as user credentials) and potential denial of service through resource exhaustion. No active exploitation or public proof-of-concept has been reported at the time of analysis.

More in Gamipress

View all
CVE-2023-24000 HIGH POC
8.2 Oct 31

A vulnerability in Ruben Garcia GamiPress gamipress.5.7. Rated high severity (CVSS 8.2), this vulnerability is remotely

CVE-2024-13496 HIGH POC
7.5 Jan 22

The GamiPress - Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

CVE-2024-2505 HIGH POC
8.1 Apr 29

The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings
CVE-2024-11036 CRITICAL
9.8 Nov 19

The The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for Wo
CVE-2023-0154 MEDIUM POC
5.4 Feb 06

The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputt
CVE-2024-1799 HIGH
8.8 Mar 20

The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr
CVE-2026-48874 HIGH
8.5 Jun 15

SQL injection in the GamiPress WordPress plugin versions 7.8.7 and earlier allows authenticated users with subscriber-le
CVE-2026-77764 MEDIUM POC
4.3 Sep 02

Insufficient access control in GamiPress (WordPress plugin before 7.9.9.6) allows any authenticated Subscriber-level use
CVE-2024-5536 MEDIUM
6.4 Jun 05

The GamiPress - Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gamipress_link s
CVE-2024-2783 MEDIUM
6.4 Apr 09

The GamiPress - The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPr
CVE-2024-2460 MEDIUM
6.4 Mar 20

The GamiPress - Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gamipress_but
CVE-2023-25715 MEDIUM
5.4 Dec 19

Missing Authorization vulnerability in GamiPress GamiPress - The #1 gamification plugin to reward points, achievements,

Same weakness CWE-89 – SQL Injection

View all
CVE-2023-48788 CRITICAL POC
9.8
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8

Same technique SQLi

View all
CVE-2019-7481 HIGH POC
7.5
CVE-2025-57819 CRITICAL POC
10.0
CVE-2017-8917 CRITICAL POC
9.8
CVE-2024-27956 CRITICAL POC
9.9
CVE-2014-3704 HIGH POC
7.5
CVE-2016-2555 CRITICAL POC
9.8
CVE-2016-8582 CRITICAL POC
9.8
CVE-2013-0333 HIGH POC
7.5

Share

CVE-2026-59538 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy