Authorization Flaw in GamiPress Affects WordPress Users
CVE-2026-24546

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Gamipress
Vendor
CVE Published:
25 May 2026

What is CVE-2026-24546?

A missing authorization vulnerability in the GamiPress plugin for WordPress has been identified. This allows attackers to exploit incorrectly configured access control security levels, potentially granting unauthorized access to restricted areas of the application. The vulnerability impacts all versions of GamiPress from n/a through 7.6.3, posing a risk to users who have not implemented proper access control measures.

Affected Version(s)

GamiPress <= 7.6.3

References

https://patchstack.com/database/wordpress/plugin/gamipres...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

bosz | Patchstack Bug Bounty Program
.