rubengc
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting rubengc.
- CVE-2026-16091GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode6.4
- CVE-2026-16090GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode6.4
- CVE-2026-15730GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute6.4
- CVE-2026-13450GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter5.3
- CVE-2025-13812GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure4.3
- CVE-2025-9539AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation8.0
- CVE-2025-9542AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions5.4
- CVE-2025-5487AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions7.2
- CVE-2024-13496GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter7.5
- CVE-2024-13495GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function7.3
- CVE-2024-13499GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function7.3
- CVE-2024-12626AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value9.6
- CVE-2024-11036GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings7.3
- CVE-2024-5536GamiPress – Link <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
- CVE-2024-2783GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4