Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

GamiPress SQL Injection in Unauthenticated Users

CVE-2026-59538 · published 3 months ago
Summary

GamiPress versions 7.9.7 and earlier allow hackers to inject malicious SQL code without logging in. This can lead to unauthorized access to sensitive data and system manipulation. Update to version 8.0 or later to fix this vulnerability.

What to do
  • Update ruben garcia gamipress to version 7.9.8.
Affected software
VendorProductAffected versions
ruben garcia gamipress <= 7.9.7
Fix: upgrade to 7.9.8
Original advisory text
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published27 Jul 2026
Updated4 Nov 2026
First seen27 Jul 2026
Sources
CVE-2026-59538 · NVD
CVE-2026-59538 · MITRE
Track software like this
Free during beta