Threat database

13 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.2%	CVE-2026-112837GamiPress · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ruben Garcia… High8.5EPSS 0.2%2026-10-23CVE Database V5CVE-2026-112837 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.7. EPSS 0.2%Vulnerability Ruben Garcia	CVE Database V5	2026-10-23
High	8.5	EPSS 0.3%	CVE-2026-94177GamiPress · SQL Injection High8.5EPSS 0.3%2026-09-30CVE Database V5CVE-2026-94177 CVE-2026-94177 is a high-severity SQL Injection vulnerability in the GamiPress plugin by Ruben Garcia. It allows an attacker with limited privileges to perform blind SQL injection attacks, potentially leading to high confidentiality impact and limited availability impact. The vulnerability affects all versions from initial releases up to 8.0.2 inclusive. No official patch or remediation information is provided in the available data. EPSS 0.3%Vulnerability Ruben Garcia #cwe-89	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.3%	CVE-2026-78266AutomatorWP · Missing Authorization Medium6.5EPSS 0.3%2026-08-24CVE Database V5CVE-2026-78266 CVE-2026-78266 is a medium severity vulnerability in AutomatorWP versions up to 5.8.3 that involves missing authorization controls. This broken access control issue allows users with subscriber-level privileges to perform unauthorized actions, impacting the integrity of the system. No patch or remediation details are provided in the available data. EPSS 0.3%Vulnerability Ruben Garcia #cwe-862	CVE Database V5	2026-08-24
Critical	9.3	EPSS 0.4%	CVE-2026-59538GamiPress · SQL Injection Critical9.3EPSS 0.4%2026-07-27CVE Database V5CVE-2026-59538 Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. EPSS 0.4%Vulnerability Ruben Garcia #cwe-89	CVE Database V5	2026-07-27
High	8.5	EPSS 0.4%	CVE-2026-48874GamiPress · SQL Injection High8.5EPSS 0.4%2026-06-15CVE Database V5CVE-2026-48874 Subscriber SQL Injection in GamiPress <= 7.8.7 versions. EPSS 0.4%Vulnerability Ruben Garcia #cwe-89	CVE Database V5	2026-06-15
High	7.1	EPSS 0.3%	CVE-2026-42775AutomatorWP · Cross-site Scripting High7.1EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42775 Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. EPSS 0.3%Vulnerability Ruben Garcia #cwe-79	CVE Database V5	2026-06-15
High	7.2	EPSS 0.3%	CVE-2026-42650AutomatorWP · Cross-site Scripting High7.2EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42650 Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. EPSS 0.3%Vulnerability Ruben Garcia #cwe-79	CVE Database V5	2026-06-15
High	7.1	EPSS 0.4%	CVE-2026-40785AutomatorWP · Authentication Bypass Using an Alternate Path or Channel High7.1EPSS 0.4%2026-06-15CVE Database V5CVE-2026-40785 Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions. EPSS 0.4%Vulnerability Ruben Garcia #cwe-288	CVE Database V5	2026-06-15
Medium	5.3	EPSS 0.3%	CVE-2026-24546GamiPress · Missing Authorization Medium5.3EPSS 0.3%2026-05-25CVE Database V5CVE-2026-24546 CVE-2026-24546 is a missing authorization vulnerability in the GamiPress plugin by Ruben Garcia, affecting versions up to 7.6.3. This flaw allows unauthorized users to exploit incorrectly configured access control security levels. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. There is no official patch or remediation level currently provided by the vendor. No known exploits are reported in the wild at this time. EPSS 0.3%Vulnerability Ruben Garcia #cwe-862	CVE Database V5	2026-05-25
Medium	5.4	EPSS 0.1%	CVE-2026-32420GamiPress · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2026-03-13CVE Database V5CVE-2026-32420 Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6. EPSS 0.1%Vulnerability Ruben Garcia	CVE Database V5	2026-03-13
High	7.6	EPSS 0.3%	CVE-2025-68561AutomatorWP · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ruben Garcia… High7.6EPSS 0.3%2025-12-23CVE Database V5CVE-2025-68561 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.2.4. EPSS 0.3%Vulnerability Ruben Garcia	CVE Database V5	2025-12-23
High	7.6	EPSS 0.3%	CVE-2025-49327ShortLinks Pro · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ruben Garcia… High7.6EPSS 0.3%2025-06-06CVE Database V5CVE-2025-49327 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia ShortLinks Pro shortlinkspro allows SQL Injection.This issue affects ShortLinks Pro: from n/a through <= 1.0.7. EPSS 0.3%Vulnerability Ruben Garcia	CVE Database V5	2025-06-06
High	7.6	EPSS 0.3%	CVE-2025-49326GamiPress · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Ruben Garcia… High7.6EPSS 0.3%2025-06-06CVE Database V5CVE-2025-49326 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through <= 7.4.5. EPSS 0.3%Vulnerability Ruben Garcia	CVE Database V5	2025-06-06

Showing 1–13 of 13 results