CVE-2024-13495

Published: 2025-01-22T11:15Z

Last Modified: 2025-01-24T20:46Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via the gamipress_ajax_get_logs() function in all versions up to, and including, 7.2.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt