Unknown Gamipress vulnerabilities

3 CVEs affecting Unknown Gamipress, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107320, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-107320, published 2026-10-14. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users.…
CVE-2026-107319, published 2026-10-14. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a…
CVE-2026-77764, published 2026-09-02. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the configured gamification…