GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress, CVE-2025-47508
- CVE, Research URL
- Application
- Published on
- May 07, 2025
- Research Description
- Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ruben Garcia GamiPress allows PHP Local File Inclusion. This issue affects GamiPress: from n/a through 7.3.7.
- Affected versions
-
max 7.3.8.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| MomentoPress for Momento360 (1d51ec84e92b349edd4438d4b1cb5874a6b7594c) , Jun 07, 2024 |
| MomentoPress for Momento360 (CVE-2023-46782) , Jun 07, 2024 |