rubengc vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20256
3. 202610

Newest CVEs

• CVE-2026-104728

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action

  rubengc · AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI

  Medium4.3
• CVE-2026-14379

  GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'video_id' Parameter

  rubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

  Medium6.4
• CVE-2026-15439

  GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection

  rubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

  Medium6.5
• CVE-2026-76074

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action

  rubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress

  Medium4.3
• CVE-2026-76057

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

  rubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress

  Medium4.3
• CVE-2026-16091

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4
• CVE-2026-16090

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4
• CVE-2026-15730

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4
• CVE-2026-13450

  GamiPress <= 7.9.4 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'access' Parameter

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium5.3
• CVE-2025-13812

  GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium4.3