CVE-2026-59538 is a critical vulnerability in GamiPress plugin versions up to 7.9.7, allowing unauthenticated SQL injection. The vulnerability has a CVSS score of 9.3 and is considered CRITICAL. This vulnerability could enable attackers to manipulate database queries, potentially leading to data breaches or other malicious activities. Administrators and users of WordPress sites with GamiPress plugin insta [truncated]
CVE-2026-48874 is a HIGH severity vulnerability (CVSS Score: 8.5) affecting GamiPress plugin versions up to 7.8.7. The vulnerability allows for Subscriber SQL Injection and has been publicly disclosed on June 15, 2026.
CVE-2026-42775 is a HIGH severity Unauthenticated Cross Site Scripting (XSS) vulnerability in AutomatorWP plugin versions <= 5.7.2. The vulnerability has a CVSS score of 7.1 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-42775).
CVE-2026-42650 is a HIGH severity Unauthenticated Cross Site Scripting (XSS) vulnerability in AutomatorWP plugin versions up to 5.6.7. The vulnerability has a CVSS score of 7.2 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-42650).
CVE-2026-40785 is a HIGH-severity vulnerability in AutomatorWP, a WordPress plugin. The vulnerability, rated 7.1 on the CVSS scale, involves Subscriber Broken Authentication and affects versions up to 5.6.7. It was published on June 15, 2026, and last modified on the same day.
A Missing Authorization vulnerability (CWE-862) in the GamiPress WordPress plugin allows exploitation of incorrectly configured access control security levels. The vulnerability affects GamiPress versions from n/a through 7.6.3. The issue was published on 2026-05-25 and modified on 2026-05-26. No known exploitation in the wild or ransomware campaign use has been reported. The vendor attribution is current [truncated]
