Vulnerabilidades de Ruben Garcia
CVEs publicadas que afetam produtos de Ruben Garcia: 10 registro(s), com severidade, exploração e correções.
CVE-2026-94177
Alta · 8.5
CWE-89 30/09/2026
WordPress GamiPress plugin <= 8.0.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress <= 8.0.2 versions.
CVE-2026-78266
Média · 6.5
CWE-862 24/08/2026
WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-59538
Crítica · 9.3
CWE-89 27/07/2026
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
CVE-2026-48874
Alta · 8.5
CWE-89 15/06/2026
WordPress GamiPress plugin <= 7.8.7 - SQL Injection vulnerability
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
CVE-2026-42775
Alta · 7.1
CWE-79 15/06/2026
WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.
CVE-2026-42650
Alta · 7.2
CWE-79 15/06/2026
WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.
CVE-2026-40785
Alta · 7.1
CWE-288 15/06/2026
WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
CVE-2026-24546
Média · 5.3
CWE-862 25/05/2026
WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects GamiPress: from n/a through 7.6.3.
CVE-2026-32420
Média · 5.4
CWE-352 13/03/2026
WordPress GamiPress plugin <= 7.6.6 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6.
CVE-2025-68561
Alta · 7.6
CWE-89 23/12/2025
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.2.4.