CVE Intelligence

Ruben Garcia vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ruben Garcia products: 10 record(s), with severity, exploitation and fixes.

AutomatorWP 5GamiPress 5

Exploited only (KEV) →

CVE-2026-94177 High · 8.5 CWE-89 Sep 30, 2026
WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.
CVE-2026-78266 Medium · 6.5 CWE-862 Aug 24, 2026
WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-59538 Critical · 9.3 CWE-89 Jul 27, 2026
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
CVE-2026-48874 High · 8.5 CWE-89 Jun 15, 2026
WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
CVE-2026-42775 High · 7.1 CWE-79 Jun 15, 2026
WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.
CVE-2026-42650 High · 7.2 CWE-79 Jun 15, 2026
WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.
CVE-2026-40785 High · 7.1 CWE-288 Jun 15, 2026
WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
CVE-2026-24546 Medium · 5.3 CWE-862 May 25, 2026
WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3.
CVE-2026-32420 Medium · 5.4 CWE-352 Mar 13, 2026
WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6.
CVE-2025-68561 High · 7.6 CWE-89 Dec 23, 2025
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.2.4.