Unauthorized Access in GamiPress WordPress Plugin
CVE-2026-107320
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-107320?
The GamiPress WordPress plugin prior to version 8.0.6 suffers from a security flaw that fails to correctly authorize access to private activity logs. This oversight enables unauthenticated users to access sensitive user activity logs, posing a risk to user privacy and data security. This vulnerability is an incomplete resolution of a previous issue, emphasizing the need for vigilance in managing plugin security.
Affected Version(s)
GamiPress 7.9.5 < 8.0.6
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.