Vulnerability in GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress — CVE-2026-107319
MediumSeverity
0.3%Estimated exploit probability
10,000+ sitesInstalls
8.0.6Fixed in
What to do now
Update GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress to 8.0.6 or later.
Affected versions
- Everything before 8.0.6
Affected: GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress (plugin, gamipress)
What the vulnerability is
The GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI plugin for WordPress is vulnerable to unauthorized access in all versions up to 8.0.6. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.