CVE-2024-13499
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jan 22, 2025
CWE ID 94
Summary
CVE-2024-13499: The GamiPress plugin for WordPress, used for rewarding points, achievements, badges, and ranks, is vulnerable to arbitrary shortcode execution. This issue arises due to the plugin's failure to properly validate input passed to the gamipress_do_shortcode() function, leading unauthenticated attackers to execute arbitrary shortcodes. Versions up to and including 7.2.1 are affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.