Cross-Site Request Forgery Vulnerability in GamiPress by Ruben Garcia
CVE-2026-32420

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Gamipress
Vendor
CVE Published:
13 March 2026

What is CVE-2026-32420?

The GamiPress plugin, developed by Ruben Garcia, is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to exploit user sessions. This issue can be exploited by sending unauthorized commands to the affected application, leading to potential unauthorized actions performed on behalf of legitimate users. The vulnerability affects all versions of GamiPress up to and including 7.6.6, which may result in various security risks affecting users' accounts and data.

Affected Version(s)

GamiPress 0 <= 7.6.6

References

https://patchstack.com/database/Wordpress/Plugin/gamipres...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

letchupkt | Patchstack Bug Bounty Program
.