GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress, CVE-2025-47508

CVE, Research URL: CVE-2025-47508
Home page URL: Security reports for GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress
Application: GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress
Published on: May 07, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ruben Garcia GamiPress allows PHP Local File Inclusion. This issue affects GamiPress: from n/a through 7.3.7.
Affected versions: Min -, max 7.3.8.
Status: vulnerable

GamiPress &#8211; The #1 gamification plugin to reward points, achievements, badges &amp; ranks in WordPress, CVE-2025-47508