rubengc

8 results · Clear filters · Feed

• High 7.5
  CVE-2026-104768

  The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulne…

  rubengc AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI Web / CMS
  Nov 7, 2026
• High 8.0
  CVE-2025-9539

  AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation

  The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the automatorwp_ajax_import_automation_from_ur…

  rubengc AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress Web / CMS
  Sep 9, 2025
• High 7.2
  CVE-2025-5487

  AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions

  The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the field_conditions parameter in all versions up to, and including, 5.2.3 due to insuff…

  rubengc AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress Web / CMS
  Jun 14, 2025
• High 7.5
  CVE-2024-13496 Scanner template

  GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

  The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.3.1 due to insufficient escaping…

  rubengc GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress Web / CMS
  Jan 22, 2025
• High 7.3
  CVE-2024-13495

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_ajax_get_logs Function

  The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. Thi…

  rubengc GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress Web / CMS
  Jan 22, 2025
• High 7.3
  CVE-2024-13499

  GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

  The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_do_shortcode() function in all versions up to, and including, 7.2.1. This is …

  rubengc GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress Web / CMS
  Jan 22, 2025
• High 7.3
  CVE-2024-11036

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.1.5 - Unauthenticated Arbitrary Shortcode Execution via gamipress_get_user_earnings

  The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipress_get_user_earnings AJAX action in all versions up to, and including, 7.…

  rubengc GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress Web / CMS
  Nov 19, 2024
• High 8.8
  CVE-2024-1799

  GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode

  The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievement_types' attribute of the gamipress_earnings shortcode in all versions up to, and inc…

  rubengc GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress Web / CMS
  Mar 20, 2024