WordPress plugin
GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 31 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High8
- Medium22
- Low0
All GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection ≤8.0.2Update to 8.0.3 | CVE-2026-94177 | |
| High7.5 | Unauthenticated SQL Injection ≤7.9.7Update to 7.9.8 | CVE-2026-59538 | |
| High8.8 | Authenticated (Contributor+) Local File Inclusion ≤7.3.7Update to 7.3.8 | CVE-2025-47508 | |
| High7.3 | Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function ≤7.2.1Update to 7.2.2 | CVE-2024-13499 | |
| High7.3 | Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function ≤7.2.1Update to 7.2.2 | CVE-2024-13495 | |
| High7.5 | Unauthenticated SQL Injection via orderby Parameter ≤7.3.1Update to 7.3.2 | CVE-2024-13496 | |
| High7.3 | Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings ≤7.1.5Update to 7.1.6 | CVE-2024-11036 | |
| High8.8 | Authenticated (Contributor+) SQL Injection via Shortcode ≤6.8.6Update to 6.8.7 | CVE-2024-1799 | |
| Critical9.8 | Unauthenticated SQL Injection ≤2.5.7Update to 2.5.7.1 | CVE-2023-24000 |
- High7.5Unauthenticated SQL Injection
≤8.0.2Update to 8.0.3
- High7.5Unauthenticated SQL Injection
≤7.9.7Update to 7.9.8
- High8.8Authenticated (Contributor+) Local File Inclusion
≤7.3.7Update to 7.3.8
- High7.3Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function
≤7.2.1Update to 7.2.2
- High7.3Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function
≤7.2.1Update to 7.2.2
- High7.5Unauthenticated SQL Injection via orderby Parameter
≤7.3.1Update to 7.3.2
- High7.3Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings
≤7.1.5Update to 7.1.6
- High8.8Authenticated (Contributor+) SQL Injection via Shortcode
≤6.8.6Update to 6.8.7
- Critical9.8Unauthenticated SQL Injection
≤2.5.7Update to 2.5.7.1
GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI: common questions
Does GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI have known vulnerabilities?
Yes. VulnCrest Radar lists 31 known vulnerabilities in GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI: 1 critical, 8 high, 22 medium. None are known to affect version null.
How do I check which version of GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI vulnerability?
CVE-2026-121792, published Nov 6, 2026: GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' Parameter. Severity: Medium (CVSS 6.5).
Is any GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI vulnerability listed in CISA KEV?
No. None of the known GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI vulnerabilities is currently listed in the CISA KEV catalog.