Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-25715 EUVD-2023-29625GHSA-769x-q5v4-m549

WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control

Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: GamiPress Product: GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress Category: Web / CMS

Description

Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue affects GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress: from n/a through 2.5.6.

Affected products

VendorProductAffectedFixed
GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress ≤ 2.5.6 —

References