rubengc vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20256
3. 202612

Newest CVEs

• CVE-2026-104768

  AutomatorWP <= 6.0.4 - Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option

  rubengc · AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI

  High7.5
• CVE-2026-121792

  GamiPress <= 8.1.1 - Authenticated (Subscriber+) SQL Injection via 'Gravity Forms Name/List Field' Parameter

  rubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

  Medium6.5
• CVE-2026-104728

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action

  rubengc · AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI

  Medium4.3
• CVE-2026-14379

  GamiPress <= 7.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'video_id' Parameter

  rubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

  Medium6.4
• CVE-2026-15439

  GamiPress <= 7.9.7 - Authenticated (Subscriber+) SQL Injection

  rubengc · GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI

  Medium6.5
• CVE-2026-76074

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action

  rubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress

  Medium4.3
• CVE-2026-76057

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

  rubengc · AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress

  Medium4.3
• CVE-2026-16091

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gamipress_rank' Shortcode

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4
• CVE-2026-16090

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via gamipress_achievement Shortcode

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4
• CVE-2026-15730

  GamiPress <= 7.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute

  rubengc · GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress

  Medium6.4