GamiPress CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM GamiPress CVE published 2026-09-02

CVE-2026-77764

The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowing users with a role as low as Subscriber to award the configured gamification points, achievements and ranks to arbitrary users including administrators, and to accrue them without limit. This vulnerability could lead to unauthorized access and privilege escalation on WordPress sites usi [truncated]