CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue affects GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress: from n/a through 2.5.6.
Explanation of Vulnerability in Simple Terms
GamiPress fails to properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify site data or disrupt service without authorization. The vulnerability affects versions up to 2.5.6. Update to a version newer than 2.5.6 to resolve this issue.
What an attacker can do
A logged-in user can modify site data or cause service disruption without proper authorization.
Potential impact on your site
Unauthorized users can alter gamification data, points, or badges, compromising the integrity of your reward system.
Conditions required to exploit
Attacker must have a low-privilege user account on the WordPress site.
Key dates
External resources
Related vulnerabilities
